VYPR

School Management System

by ProjectsAndPrograms

Source repositories

CVEs (2)

  • CVE-2026-47325MedJun 3, 2026
    risk 0.45cvss epss

    ProjectsAndPrograms school-management-system uses predictable credentials by generating student's and teacher's passwords solely from the user’s date of birth (e.g., 12072000 for 12 July 2000). The application does not require or prompt users to change the password upon first…

  • CVE-2026-47324MedJun 3, 2026
    risk 0.33cvss epss

    ProjectsAndPrograms school-management-system is vulnerable to Stored Cross‑Site Scripting (XSS) in multiple attributes of students and teachers objects. An authorized attacker (e.g., a teacher or administrator) can inject malicious JavaScript that is subsequently executed in…