PatchTheCVEedubusinesssolutions vulnerabilities
Recent CVEs affecting edubusinesssolutions products. 6 tracked.
edubusinesssolutions has 6 tracked vulnerabilities, 3 critical. A fixed release or vendor patch exists for 2. Most recent: 2026-02-20. Highest priority: CVE-2025-61548 (score 59/100).
- CVE-2026-26725 CRITICAL 9.8 DOWNGRADE An issue in edu Business Solutions Print Shop Pro WebDesk v.18.34 (fixed in 19.76) allows a remote attacker to
- CVE-2025-61550 MEDIUM 5.4 DOWNGRADE Cross-Site Scripting (XSS) is present on the ctl00_Content01_fieldValue parameters on the /psp/appNet/Template
- CVE-2025-61549 MEDIUM 6.1 DOWNGRADE Cross-Site Scripting (XSS) is present on the LoginID parameter on the /PSP/app/web/reg/reg_display.asp endpoin
- CVE-2025-61548 CRITICAL 9.8 DOWNGRADE SQL Injection is present on the hfInventoryDistFormID parameter in the /PSP/appNET/Store/CartV12.aspx/GetUnitP
- CVE-2025-61547 MEDIUM 6.8 DOWNGRADE Cross-Site Request Forgery (CSRF) is present on all functions in edu Business Solutions Print Shop Pro WebDesk
- CVE-2025-61546 CRITICAL 9.1 DOWNGRADE There is an issue on the /PSP/appNET/Store/CartV12.aspx/GetUnitPrice endpoint in edu Business Solutions Print
FAQ
How do I fix edubusinesssolutions vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is edubusinesssolutions being exploited right now?
None of the tracked edubusinesssolutions CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which edubusinesssolutions CVE should I patch first?
CVE-2025-61548 currently ranks highest (59/100): SQL Injection is present on the hfInventoryDistFormID parameter in the /PSP/appNET/Store/CartV12.aspx/GetUnitP.