Itsourcecode Online Enrollment System vulnerabilities

6 CVEs affecting Itsourcecode Online Enrollment System, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-5534, published 2026-04-05.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2026-5334, published 2026-04-02. Critical severity, CVSS 9.8. EPSS: 0.6% chance of exploitation in the next 30 days. A weakness has been identified in itsourcecode Online Enrollment System 1.0. Impacted is an unknown function of the file /enrollment/index.php?view=edit&id=3 of the component Parameter Handler. This…
CVE-2026-4236, published 2026-03-16. High severity, CVSS 7.3. EPSS: 0.5% chance of exploitation in the next 30 days. A security vulnerability has been detected in itsourcecode Online Enrollment System 1.0. Impacted is an unknown function of the file /enrollment/index.php?view=add. Such manipulation of the argument…
CVE-2026-4235, published 2026-03-16. High severity, CVSS 7.3. EPSS: 0.4% chance of exploitation in the next 30 days. A weakness has been identified in itsourcecode Online Enrollment System 1.0. This issue affects some unknown processing of the file /sms/login.php. This manipulation of the argument user_email causes…
CVE-2026-5534, published 2026-04-05. High severity, CVSS 7.3. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability was identified in itsourcecode Online Enrollment System 1.0. This affects an unknown function of the file /sms/user/index.php?view=edit&id=10 of the component Parameter Handler. Such…
CVE-2026-4842, published 2026-03-26. High severity, CVSS 7.3. EPSS: 0.4% chance of exploitation in the next 30 days. A security vulnerability has been detected in itsourcecode Online Enrollment System 1.0. This vulnerability affects unknown code of the file /sms/grades/index.php?view=edit&id=1 of the component…
CVE-2026-4632, published 2026-03-24. High severity, CVSS 7.3. EPSS: 0.4% chance of exploitation in the next 30 days. A weakness has been identified in itsourcecode Online Enrollment System 1.0. This vulnerability affects unknown code of the file /sms/user/index.php?view=add of the component Parameter Handler.…