CVE-2023-49982: ORETNOM23 School Fees Management System

High severity, CVSS 8.8. EPSS: 0.8% chance of exploitation in the next 30 days.

Broken access control in the component /admin/management/users of School Fees Management System v1.0 allows attackers to escalate privileges and perform Administrative actions, including adding and deleting user accounts.

Affected products

• ORETNOM23 School Fees Management System: version 1.0 only

Published 2024-03-21. Last modified 2026-06-17.