CVE-2022-32118: Arox School ERP Pro

Medium severity, CVSS 6.1. EPSS: 1.1% chance of exploitation in the next 30 days.

Arox School ERP Pro v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the dispatchcategory parameter in backoffice.inc.php.

Affected products

• Arox School ERP Pro: version 1.0 only

Published 2022-07-15. Last modified 2026-06-17.