https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-3587.htmlhttps://patchthecve.com/cve/CVE-2025-3587.htmlWed, 17 Jun 2026 09:20:15 +0000MEDIUM 6.3: A vulnerability classified as critical was found in ZeroWdd/code-projects studentmanager 1.0. This vulnerability affects unknown code of the file /getTeacherList. The manipulation leads to improper authorization. The attack can be initiated remotely. The exploit has been disclosed to the public and https://patchthecve.com/cve/CVE-2025-3565.htmlhttps://patchthecve.com/cve/CVE-2025-3565.htmlWed, 17 Jun 2026 09:20:11 +0000MEDIUM 4.7: A vulnerability classified as critical was found in huanfenz/code-projects StudentManager 1.0. This vulnerability affects unknown code of the file /upload/uploadArticle.do of the component Announcement Management Section. The manipulation of the argument File leads to unrestricted upload. The attackhttps://patchthecve.com/cve/CVE-2025-3564.htmlhttps://patchthecve.com/cve/CVE-2025-3564.htmlWed, 17 Jun 2026 09:20:11 +0000MEDIUM 4.3: A vulnerability classified as problematic has been found in huanfenz/code-projects StudentManager up to 1.0. This affects an unknown part of the component Teacher String Handler. The manipulation leads to improper authorization. It is possible to initiate the attack remotely. The exploit has been dihttps://patchthecve.com/cve/CVE-2024-13143.htmlhttps://patchthecve.com/cve/CVE-2024-13143.htmlWed, 17 Jun 2026 07:01:18 +0000LOW 2.4: A vulnerability was found in ZeroWdd studentmanager 1.0. It has been rated as problematic. This issue affects the function submitAddPermission of the file src/main/java/com/zero/system/controller/PermissionController. java. The manipulation of the argument url leads to cross site scripting. The atta