Oretnom23 School Fees Management System — known CVE vulnerabilities

Every CVE whose affected-product data names Oretnom23 School Fees Management System, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (7)

• CVE-2023-49982 — CVSS 8.8 (high): Broken access control in the component /admin/management/users of School Fees Management System v1.0 allows attackers to escalate…
• CVE-2023-49981 — CVSS 7.5 (high): A directory listing vulnerability in School Fees Management System v1.0 allows attackers to list directories and sensitive files within the…
• CVE-2023-49983 — CVSS 6.8 (medium): A cross-site scripting (XSS) vulnerability in the component /management/class of School Fees Management System v1.0 allows attackers to…
• CVE-2023-49985 — CVSS 6.5 (medium): A cross-site scripting (XSS) vulnerability in the component /management/class of School Fees Management System v1.0 allows attackers to…
• CVE-2023-49984 — CVSS 6.1 (medium): A cross-site scripting (XSS) vulnerability in the component /management/settings of School Fees Management System v1.0 allows attackers to…
• CVE-2023-49987 — CVSS 5.4 (medium): A cross-site scripting (XSS) vulnerability in the component /management/term of School Fees Management System v1.0 allows attackers to…
• CVE-2023-49986 — CVSS 4.7 (medium): A cross-site scripting (XSS) vulnerability in the component /admin/parent of School Fees Management System 1.0 allow attackers to execute…