Academiaerp Student Information System — known CVE vulnerabilities

Every CVE whose affected-product data names Academiaerp Student Information System, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2025-25948 — CVSS 9.1 (critical): Incorrect access control in the component /rest/staffResource/create of Serosoft Solutions Pvt Ltd Academia Student Information System…
• CVE-2024-53636 — CVSS 6.4 (medium): An arbitrary file upload vulnerability via writefile.php of Serosoft Academia Student Information System (SIS) EagleR-1.0.118 allows…
• CVE-2025-25949 — CVSS 5.4 (medium): A stored cross-site scripting (XSS) vulnerability in Serosoft Solutions Pvt Ltd Academia Student Information System (SIS) EagleR v1.0.118…