ORETNOM23 School Fees Management System vulnerabilities

7 CVEs affecting ORETNOM23 School Fees Management System, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-49985, published 2024-03-21.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2023-49982, published 2024-03-21. High severity, CVSS 8.8. EPSS: 0.8% chance of exploitation in the next 30 days. Broken access control in the component /admin/management/users of School Fees Management System v1.0 allows attackers to escalate privileges and perform Administrative actions, including adding and…
CVE-2023-49981, published 2024-03-21. High severity, CVSS 7.5. EPSS: 0.7% chance of exploitation in the next 30 days. A directory listing vulnerability in School Fees Management System v1.0 allows attackers to list directories and sensitive files within the application without requiring authorization.
CVE-2023-49983, published 2024-03-21. Medium severity, CVSS 6.8. EPSS: 0.6% chance of exploitation in the next 30 days. A cross-site scripting (XSS) vulnerability in the component /management/class of School Fees Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload…
CVE-2023-49984, published 2024-03-21. Medium severity, CVSS 6.1. EPSS: 0.5% chance of exploitation in the next 30 days. A cross-site scripting (XSS) vulnerability in the component /management/settings of School Fees Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload…
CVE-2023-49986, published 2024-03-07. Medium severity, CVSS 4.7. EPSS: 0.5% chance of exploitation in the next 30 days. A cross-site scripting (XSS) vulnerability in the component /admin/parent of School Fees Management System 1.0 allow attackers to execute arbitrary web scripts or HTML via a crafted payload injected…
CVE-2023-49985, published 2024-03-21. Medium severity, CVSS 6.5. EPSS: 0.5% chance of exploitation in the next 30 days. A cross-site scripting (XSS) vulnerability in the component /management/class of School Fees Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload…
CVE-2023-49987, published 2024-03-07. Medium severity, CVSS 5.4. EPSS: 0.4% chance of exploitation in the next 30 days. A cross-site scripting (XSS) vulnerability in the component /management/term of School Fees Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload…