https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-11661.htmlhttps://patchthecve.com/cve/CVE-2025-11661.htmlThu, 08 Oct 2026 12:10:00 +0000HIGH 7.3: A vulnerability was found in ProjectsAndPrograms School Management System up to 6b6fae5426044f89c08d0dd101c7fa71f9042a59. This affects an unknown part. Performing manipulation results in missing authentication. The attack is possible to be carried out remotely. The exploit has been made public and chttps://patchthecve.com/cve/CVE-2025-11660.htmlhttps://patchthecve.com/cve/CVE-2025-11660.htmlThu, 08 Oct 2026 12:10:00 +0000HIGH 7.3: A vulnerability has been found in ProjectsAndPrograms School Management System up to 6b6fae5426044f89c08d0dd101c7fa71f9042a59. Affected by this issue is some unknown functionality of the file /assets/uploadSllyabus.php. Such manipulation of the argument File leads to unrestricted upload. The attack https://patchthecve.com/cve/CVE-2025-11659.htmlhttps://patchthecve.com/cve/CVE-2025-11659.htmlThu, 08 Oct 2026 12:10:00 +0000HIGH 7.3: A flaw has been found in ProjectsAndPrograms School Management System up to 6b6fae5426044f89c08d0dd101c7fa71f9042a59. Affected by this vulnerability is an unknown functionality of the file /assets/uploadNotes.php. This manipulation of the argument File causes unrestricted upload. Remote exploitationhttps://patchthecve.com/cve/CVE-2025-11658.htmlhttps://patchthecve.com/cve/CVE-2025-11658.htmlThu, 08 Oct 2026 12:10:00 +0000HIGH 7.3: A vulnerability was detected in ProjectsAndPrograms School Management System up to 6b6fae5426044f89c08d0dd101c7fa71f9042a59. Affected is an unknown function of the file /assets/changeSllyabus.php. The manipulation of the argument File results in unrestricted upload. The attack may be launched remotehttps://patchthecve.com/cve/CVE-2025-11657.htmlhttps://patchthecve.com/cve/CVE-2025-11657.htmlThu, 08 Oct 2026 12:10:00 +0000HIGH 7.3: A security vulnerability has been detected in ProjectsAndPrograms School Management System up to 6b6fae5426044f89c08d0dd101c7fa71f9042a59. This impacts an unknown function of the file /assets/createNotice.php. The manipulation of the argument File leads to unrestricted upload. The attack may be inithttps://patchthecve.com/cve/CVE-2025-11656.htmlhttps://patchthecve.com/cve/CVE-2025-11656.htmlThu, 08 Oct 2026 12:10:00 +0000HIGH 7.3: A weakness has been identified in ProjectsAndPrograms School Management System up to 6b6fae5426044f89c08d0dd101c7fa71f9042a59. This affects an unknown function of the file /assets/editNotes.php. Executing manipulation of the argument File can lead to unrestricted upload. The attack can be launched rhttps://patchthecve.com/cve/CVE-2025-11056.htmlhttps://patchthecve.com/cve/CVE-2025-11056.htmlFri, 09 Oct 2026 10:10:00 +0000MEDIUM 6.3: A flaw has been found in ProjectsAndPrograms School Management System 1.0. Affected by this vulnerability is an unknown functionality of the file owner_panel/fetch-data/select-students.php. This manipulation of the argument select causes sql injection. Remote exploitation of the attack is possible. https://patchthecve.com/cve/CVE-2025-51967.htmlhttps://patchthecve.com/cve/CVE-2025-51967.htmlSat, 26 Sep 2026 00:10:00 +0000MEDIUM 6.1: A Reflected Cross-site Scripting (XSS) vulnerability exists in the themeSet.php file of ProjectsAndPrograms School Management System 1.0. The application fails to sanitize user-supplied input in the theme POST parameter, allowing an attacker to inject and execute arbitrary JavaScript in a victim's b