<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: school management software</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2025-1159: A vulnerability was found in CampCodes School Management Software 1.0</title><link>https://patchthecve.com/cve/CVE-2025-1159.html</link><guid>https://patchthecve.com/cve/CVE-2025-1159.html</guid><pubDate>Wed, 17 Jun 2026 08:38:29 +0000</pubDate><description>LOW 3.5: A vulnerability was found in CampCodes School Management Software 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /academic-calendar. The manipulation leads to cross site scripting. The attack can be launched remotely. The exploit has </description></item><item><title>CVE-2025-0849: A vulnerability classified as critical has been found in CampCodes School Management Software 1.0</title><link>https://patchthecve.com/cve/CVE-2025-0849.html</link><guid>https://patchthecve.com/cve/CVE-2025-0849.html</guid><pubDate>Wed, 17 Jun 2026 08:27:15 +0000</pubDate><description>MEDIUM 6.3: A vulnerability classified as critical has been found in CampCodes School Management Software 1.0. Affected is an unknown function of the file /edit-staff/ of the component Staff Handler. The manipulation leads to improper authorization. It is possible to launch the attack remotely. The exploit has </description></item><item><title>CVE-2025-0710: A vulnerability classified as problematic has been found in CampCodes School Management Software 1.0</title><link>https://patchthecve.com/cve/CVE-2025-0710.html</link><guid>https://patchthecve.com/cve/CVE-2025-0710.html</guid><pubDate>Wed, 17 Jun 2026 08:27:01 +0000</pubDate><description>LOW 3.5: A vulnerability classified as problematic has been found in CampCodes School Management Software 1.0. Affected is an unknown function of the file /notice-list of the component Notice Board Page. The manipulation of the argument Notice leads to cross site scripting. It is possible to launch the attac</description></item><item><title>CVE-2025-0625: A vulnerability, which was classified as problematic, was found in CampCodes School Management Software 1.0</title><link>https://patchthecve.com/cve/CVE-2025-0625.html</link><guid>https://patchthecve.com/cve/CVE-2025-0625.html</guid><pubDate>Wed, 17 Jun 2026 08:26:51 +0000</pubDate><description>LOW 3.1: A vulnerability, which was classified as problematic, was found in CampCodes School Management Software 1.0. This affects an unknown part of the component Attachment Handler. The manipulation leads to improper control of resource identifiers. It is possible to initiate the attack remotely. The compl</description></item><item><title>CVE-2025-0560: A vulnerability, which was classified as problematic, was found in CampCodes School Management Software 1.0</title><link>https://patchthecve.com/cve/CVE-2025-0560.html</link><guid>https://patchthecve.com/cve/CVE-2025-0560.html</guid><pubDate>Wed, 17 Jun 2026 08:26:42 +0000</pubDate><description>LOW 2.4: A vulnerability, which was classified as problematic, was found in CampCodes School Management Software 1.0. Affected is an unknown function of the file /photo-gallery of the component Photo Gallery Page. The manipulation of the argument Description leads to cross site scripting. It is possible to l</description></item><item><title>CVE-2025-0559: A vulnerability, which was classified as problematic, has been found in Campcodes School Management Software 1</title><link>https://patchthecve.com/cve/CVE-2025-0559.html</link><guid>https://patchthecve.com/cve/CVE-2025-0559.html</guid><pubDate>Wed, 17 Jun 2026 08:26:42 +0000</pubDate><description>LOW 2.4: A vulnerability, which was classified as problematic, has been found in Campcodes School Management Software 1.0. This issue affects some unknown processing of the file /create-id-card of the component Create Id Card Page. The manipulation of the argument ID Card Title leads to cross site scripting.</description></item></channel></rss>