CVE-2025-15657: Mojoomla School Management

Medium severity, CVSS 5.3. EPSS: 0.2% chance of exploitation in the next 30 days.

Unauthenticated Insecure Direct Object References (IDOR) in School Management <= 93.1.0 versions.

Affected products

• Mojoomla School Management: up to and including 93.1.0

Published 2026-06-17. Last modified 2026-10-06.