https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-27717.htmlhttps://patchthecve.com/cve/CVE-2024-27717.htmlWed, 17 Jun 2026 07:20:12 +0000MEDIUM 6.5: Cross Site Request Forgery vulnerability in Eskooly Free Online School Management Software v.3.0 and before allows a remote attacker to escalate privileges via the Token Handling component.https://patchthecve.com/cve/CVE-2024-27715.htmlhttps://patchthecve.com/cve/CVE-2024-27715.htmlWed, 17 Jun 2026 07:20:11 +0000HIGH 8.2: An issue in Eskooly Free Online School management Software v.3.0 and before allows a remote attacker to escalate privileges via a crafted request to the Password Change mechanism.https://patchthecve.com/cve/CVE-2024-27713.htmlhttps://patchthecve.com/cve/CVE-2024-27713.htmlWed, 17 Jun 2026 07:20:11 +0000HIGH 8.8: An issue in Eskooly Free Online School management Software v.3.0 and before allows a remote attacker to escalate privileges via the HTTP Response Header Settings component.https://patchthecve.com/cve/CVE-2024-27712.htmlhttps://patchthecve.com/cve/CVE-2024-27712.htmlWed, 17 Jun 2026 07:20:11 +0000CRITICAL 9.8: An issue in Eskooly Free Online School management Software v.3.0 and before allows a remote attacker to escalate privileges via the User Account Mangemnt component in the authentication mechanism.https://patchthecve.com/cve/CVE-2024-27711.htmlhttps://patchthecve.com/cve/CVE-2024-27711.htmlWed, 17 Jun 2026 07:20:11 +0000HIGH 8.8: An issue in Eskooly Free Online School management Software v.3.0 and before allows a remote attacker to escalate privileges via the Sin-up process function in the account settings.https://patchthecve.com/cve/CVE-2024-27710.htmlhttps://patchthecve.com/cve/CVE-2024-27710.htmlWed, 17 Jun 2026 07:20:11 +0000CRITICAL 9.8: An issue in Eskooly Free Online School management Software v.3.0 and before allows a remote attacker to escalate privileges via the authentication mechanism.