School Management
Approved changes feed: RSS · Atom
cpe:2.3:a:mojoomla:school_management:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Mojoomla (723d8d71-8722-5481-8521-63e781b12f90) |
|---|---|
| Product | School Management (1dcb8e03-e1ff-5f3e-8faa-8f03cc068fb2) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-15657 |
vulnerable | 2026-07-28 23:24:04.712518 |
WordPress School Management plugin <= 93.1.0 - Insecure Direct Object References (IDOR) vulnerability
MEDIUM (5.3)
Unauthenticated Insecure Direct Object References (IDOR) in School Management <= 93.1.0 versions.
Published: 2026-06-17T12:47:18.353Z
Updated: 2026-06-17T14:37:47.983Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-48108 |
vulnerable | 2026-06-08 07:27:15.487452 |
WordPress School Management Plugin <= 93.2.0 - Broken Access Control Vulnerability
MEDIUM (6.5)
Missing Authorization vulnerability in Mojoomla School Management allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects School Management: from n/a through 93.2.0.
Published: 2025-08-26T09:41:50.512Z
Updated: 2026-04-28T16:12:51.669Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-47613 |
vulnerable | 2026-06-08 07:27:14.620544 |
WordPress School Management System for Wordpress plugin <= 92.0.0 - Reflected Cross Site Scripting (XSS) vulnerability
HIGH (7.1)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in mojoomla School Management allows Reflected XSS. This issue affects School Management: from n/a through 92.0.0.
Published: 2025-05-23T12:43:27.686Z
Updated: 2026-04-28T16:12:47.043Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-47575 |
vulnerable | 2026-06-08 07:27:14.572192 |
WordPress School Management plugin <= 92.0.0 - SQL Injection vulnerability
HIGH (8.5)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in mojoomla School Management allows SQL Injection. This issue affects School Management: from n/a through 92.0.0.
Published: 2025-05-23T12:43:29.529Z
Updated: 2026-04-28T16:12:45.755Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-47574 |
vulnerable | 2026-06-08 07:27:14.571917 |
WordPress School Management System Plugin <= 92.0.0 - Reflected Cross Site Scripting (XSS) vulnerability
HIGH (7.1)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in mojoomla School Management allows Reflected XSS. This issue affects School Management: from n/a through 92.0.0.
Published: 2025-06-27T11:52:33.828Z
Updated: 2026-04-28T16:12:45.825Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-47573 |
vulnerable | 2026-06-08 07:27:14.571646 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-47572 |
vulnerable | 2026-06-08 07:27:14.571328 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-31100 |
vulnerable | 2026-06-08 07:17:02.372212 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-15656 |
vulnerable | 2026-06-08 07:06:36.599696 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-15655 |
vulnerable | 2026-06-08 07:06:36.599505 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.