Oretnom23 School Fees Management System vulnerabilities

7 vulnerabilities

Known vulnerabilities in Oretnom23 School Fees Management System, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

6.8CVE-2023-49983oretnom23school_fees_management_system
EPSS score
0.57%
A cross-site scripting (XSS) vulnerability in the component /management/class of School Fees Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the name parameter.8.8CVE-2023-49982oretnom23school_fees_management_system
EPSS score
0.84%
Broken access control in the component /admin/management/users of School Fees Management System v1.0 allows attackers to escalate privileges and perform Administrative actions, including adding and deleting user accounts.6.1CVE-2023-49984oretnom23school_fees_management_system
EPSS score
0.48%
A cross-site scripting (XSS) vulnerability in the component /management/settings of School Fees Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the name parameter.6.5CVE-2023-49985oretnom23school_fees_management_system
EPSS score
0.47%
A cross-site scripting (XSS) vulnerability in the component /management/class of School Fees Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the cname parameter.7.5CVE-2023-49981oretnom23school_fees_management_system
EPSS score
0.74%
A directory listing vulnerability in School Fees Management System v1.0 allows attackers to list directories and sensitive files within the application without requiring authorization.4.7CVE-2023-49986oretnom23school_fees_management_system
EPSS score
0.47%
A cross-site scripting (XSS) vulnerability in the component /admin/parent of School Fees Management System 1.0 allow attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the name parameter.5.4CVE-2023-49987oretnom23school_fees_management_system
EPSS score
0.43%
A cross-site scripting (XSS) vulnerability in the component /management/term of School Fees Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the tname parameter.