https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2022-45224.htmlhttps://patchthecve.com/cve/CVE-2022-45224.htmlWed, 17 Jun 2026 05:09:41 +0000MEDIUM 4.8: Web-Based Student Clearance System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability in Admin/add-admin.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the txtfullname parameter.https://patchthecve.com/cve/CVE-2022-45223.htmlhttps://patchthecve.com/cve/CVE-2022-45223.htmlWed, 17 Jun 2026 05:09:41 +0000MEDIUM 4.8: Web-Based Student Clearance System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability in /Admin/add-student.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the txtfullname parameter.https://patchthecve.com/cve/CVE-2022-45221.htmlhttps://patchthecve.com/cve/CVE-2022-45221.htmlWed, 17 Jun 2026 05:09:40 +0000MEDIUM 4.8: Web-Based Student Clearance System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability in changepassword.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the txtnew_password parameter.https://patchthecve.com/cve/CVE-2022-43078.htmlhttps://patchthecve.com/cve/CVE-2022-43078.htmlWed, 17 Jun 2026 05:05:52 +0000MEDIUM 4.8: A cross-site scripting (XSS) vulnerability in /admin/add-fee.php of Web-Based Student Clearance System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the cmddept parameter.https://patchthecve.com/cve/CVE-2022-43076.htmlhttps://patchthecve.com/cve/CVE-2022-43076.htmlWed, 17 Jun 2026 05:05:52 +0000MEDIUM 4.8: A cross-site scripting (XSS) vulnerability in /admin/edit-admin.php of Web-Based Student Clearance System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the txtemail parameter.https://patchthecve.com/cve/CVE-2022-3733.htmlhttps://patchthecve.com/cve/CVE-2022-3733.htmlWed, 17 Jun 2026 05:00:11 +0000MEDIUM 5.0: A vulnerability was found in SourceCodester Web-Based Student Clearance System. It has been classified as critical. This affects an unknown part of the file Admin/edit-admin.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit hhttps://patchthecve.com/cve/CVE-2022-3436.htmlhttps://patchthecve.com/cve/CVE-2022-3436.htmlWed, 17 Jun 2026 04:59:31 +0000MEDIUM 6.3: A vulnerability classified as critical was found in SourceCodester Web-Based Student Clearance System 1.0. Affected by this vulnerability is an unknown functionality of the file edit-photo.php of the component Photo Handler. The manipulation leads to unrestricted upload. The attack can be launched rhttps://patchthecve.com/cve/CVE-2022-3434.htmlhttps://patchthecve.com/cve/CVE-2022-3434.htmlWed, 17 Jun 2026 04:59:31 +0000LOW 3.5: A vulnerability was found in SourceCodester Web-Based Student Clearance System. It has been rated as problematic. Affected by this issue is the function prepare of the file /Admin/add-student.php. The manipulation leads to cross site scripting. The attack may be launched remotely. The exploit has behttps://patchthecve.com/cve/CVE-2022-3414.htmlhttps://patchthecve.com/cve/CVE-2022-3414.htmlWed, 17 Jun 2026 04:59:28 +0000MEDIUM 5.0: A vulnerability was found in SourceCodester Web-Based Student Clearance System. It has been classified as critical. Affected is an unknown function of the file /Admin/login.php of the component POST Parameter Handler. The manipulation of the argument txtusername leads to sql injection. It is possibl