student-manage
CVEs (6)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2025-50585 | Hig | 0.57 | 8.8 | 0.00 | Jul 18, 2025 | StudentManage v1.0 was discovered to contain a SQL injection vulnerability via the component /admin/adminStudentUrl. | ||
| CVE-2025-29504 | Hig | 0.51 | 7.8 | 0.00 | Apr 3, 2025 | Insecure Permission vulnerability in student-manage 1 allows a local attacker to escalate privileges via the Unsafe permission verification. | ||
| CVE-2025-50586 | Med | 0.42 | 6.5 | 0.00 | Jul 18, 2025 | StudentManage v1.0 was discovered to contain Cross-Site Request Forgery (CSRF). | ||
| CVE-2025-50583 | Med | 0.31 | 4.8 | 0.00 | Jul 18, 2025 | StudentManage v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the Add A New Student module. | ||
| CVE-2025-50582 | Med | 0.31 | 4.8 | 0.00 | Jul 18, 2025 | StudentManage v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the Add A New Course module. | ||
| CVE-2025-50584 | Med | 0.31 | 4.8 | 0.00 | Jul 18, 2025 | StudentManage v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the Add A New Teacher module. |
- risk 0.57cvss 8.8epss 0.00
StudentManage v1.0 was discovered to contain a SQL injection vulnerability via the component /admin/adminStudentUrl.
- risk 0.51cvss 7.8epss 0.00
Insecure Permission vulnerability in student-manage 1 allows a local attacker to escalate privileges via the Unsafe permission verification.
- risk 0.42cvss 6.5epss 0.00
StudentManage v1.0 was discovered to contain Cross-Site Request Forgery (CSRF).
- risk 0.31cvss 4.8epss 0.00
StudentManage v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the Add A New Student module.
- risk 0.31cvss 4.8epss 0.00
StudentManage v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the Add A New Course module.
- risk 0.31cvss 4.8epss 0.00
StudentManage v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the Add A New Teacher module.