https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-4824.htmlhttps://patchthecve.com/cve/CVE-2024-4824.htmlWed, 17 Jun 2026 08:03:00 +0000CRITICAL 9.8: Vulnerability in School ERP Pro+Responsive 1.0 that allows SQL injection through the '/SchoolERP/office_admin/' index in the parameters groups_id, examname, classes_id, es_voucherid, es_class, etc. This vulnerability could allow a remote attacker to send a specially crafted SQL query to the server ahttps://patchthecve.com/cve/CVE-2024-4823.htmlhttps://patchthecve.com/cve/CVE-2024-4823.htmlWed, 17 Jun 2026 08:03:00 +0000MEDIUM 6.5: Vulnerability in School ERP Pro+Responsive 1.0 that allows XSS via the index '/schoolerp/office_admin/' in the parameters es_bankacc, es_bank_name, es_bank_pin, es_checkno, es_teller_number, dc1 and dc2. An attacker could send a specially crafted JavaScript payload to an authenticated user and partihttps://patchthecve.com/cve/CVE-2024-4822.htmlhttps://patchthecve.com/cve/CVE-2024-4822.htmlWed, 17 Jun 2026 08:03:00 +0000MEDIUM 6.5: Vulnerability in School ERP Pro+Responsive 1.0 that allows XSS via the username and password parameters in '/index.php'. This vulnerability allows an attacker to partially take control of the victim's browser session.