https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2021-40261.htmlhttps://patchthecve.com/cve/CVE-2021-40261.htmlWed, 17 Jun 2026 04:06:40 +0000MEDIUM 6.1: Multiple Cross Site Scripting (XSS) vulnerabilities exist in SourceCodester CASAP Automated Enrollment System 1.0 via the (1) user_username and (2) category parameters in save_class.php, the (3) firstname, (4) class, and (5) status parameters in student_table.php, the (6) category and (7) class_namehttps://patchthecve.com/cve/CVE-2021-27332.htmlhttps://patchthecve.com/cve/CVE-2021-27332.htmlThu, 09 Jul 2026 01:16:48 +0000MEDIUM 6.1: Cross-site scripting (XSS) vulnerability in SourceCodester CASAP Automated Enrollment System v 1.0 allows remote attackers to inject arbitrary web script or HTML via the class_name parameter to update_class.php.https://patchthecve.com/cve/CVE-2021-26223.htmlhttps://patchthecve.com/cve/CVE-2021-26223.htmlWed, 17 Jun 2026 03:42:58 +0000CRITICAL 9.8: SQL injection vulnerability in SourceCodester CASAP Automated Enrollment System v 1.0 allows remote attackers to execute arbitrary SQL statements, via the id parameter to view_pay.php.https://patchthecve.com/cve/CVE-2021-26226.htmlhttps://patchthecve.com/cve/CVE-2021-26226.htmlWed, 17 Jun 2026 03:42:58 +0000CRITICAL 9.8: SQL injection vulnerability in SourceCodester CASAP Automated Enrollment System v 1.0 allows remote attackers to execute arbitrary SQL statements, via the id parameter to edit_user.php.https://patchthecve.com/cve/CVE-2021-26230.htmlhttps://patchthecve.com/cve/CVE-2021-26230.htmlWed, 17 Jun 2026 03:42:59 +0000MEDIUM 6.1: Cross-site scripting (XSS) vulnerability in SourceCodester CASAP Automated Enrollment System v 1.0 allows remote attackers to inject arbitrary web script or HTML via the user information to save_user.php.https://patchthecve.com/cve/CVE-2021-26229.htmlhttps://patchthecve.com/cve/CVE-2021-26229.htmlWed, 17 Jun 2026 03:42:58 +0000CRITICAL 9.8: SQL injection vulnerability in SourceCodester CASAP Automated Enrollment System v 1.0 allows remote attackers to execute arbitrary SQL statements, via the id parameter to edit_stud.php.https://patchthecve.com/cve/CVE-2021-26228.htmlhttps://patchthecve.com/cve/CVE-2021-26228.htmlWed, 17 Jun 2026 03:42:58 +0000CRITICAL 9.8: SQL injection vulnerability in SourceCodester CASAP Automated Enrollment System v 1.0 allows remote attackers to execute arbitrary SQL statements, via the id parameter to edit_class1.php.https://patchthecve.com/cve/CVE-2021-26227.htmlhttps://patchthecve.com/cve/CVE-2021-26227.htmlWed, 17 Jun 2026 03:42:58 +0000MEDIUM 6.1: Cross-site scripting (XSS) vulnerability in SourceCodester CASAP Automated Enrollment System v 1.0 allows remote attackers to inject arbitrary web script or HTML via the student information parameters to edit_stud.php.https://patchthecve.com/cve/CVE-2021-27129.htmlhttps://patchthecve.com/cve/CVE-2021-27129.htmlWed, 17 Jun 2026 03:44:19 +0000MEDIUM 5.4: CASAP Automated Enrollment System version 1.0 contains a cross-site scripting (XSS) vulnerability through the Students > Edit > ROUTE parameter.https://patchthecve.com/cve/CVE-2021-26201.htmlhttps://patchthecve.com/cve/CVE-2021-26201.htmlWed, 17 Jun 2026 03:42:57 +0000CRITICAL 9.8: The Login Panel of CASAP Automated Enrollment System 1.0 is vulnerable to SQL injection authentication bypass. An attacker can obtain access to the admin panel by injecting a SQL query in the username field of the login page.https://patchthecve.com/cve/CVE-2021-3294.htmlhttps://patchthecve.com/cve/CVE-2021-3294.htmlThu, 09 Jul 2026 01:17:01 +0000MEDIUM 5.4: CASAP Automated Enrollment System 1.0 is affected by cross-site scripting (XSS) in users.php. An attacker can steal a cookie to perform user redirection to a malicious website.