<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: yungifez</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2025-13785: A security vulnerability has been detected in yungifez Skuul School Management System up to 2.6.5</title><link>https://patchthecve.com/cve/CVE-2025-13785.html</link><guid>https://patchthecve.com/cve/CVE-2025-13785.html</guid><pubDate>Sun, 18 Oct 2026 18:10:00 +0000</pubDate><description>MEDIUM 4.3: A security vulnerability has been detected in yungifez Skuul School Management System up to 2.6.5. This issue affects some unknown processing of the file /user/profile of the component Image Handler. Such manipulation leads to information disclosure. The attack may be performed from remote. The expl</description></item><item><title>CVE-2025-13784: A weakness has been identified in yungifez Skuul School Management System up to 2.6.5</title><link>https://patchthecve.com/cve/CVE-2025-13784.html</link><guid>https://patchthecve.com/cve/CVE-2025-13784.html</guid><pubDate>Sun, 18 Oct 2026 18:10:00 +0000</pubDate><description>LOW 2.4: A weakness has been identified in yungifez Skuul School Management System up to 2.6.5. This vulnerability affects unknown code of the file /dashboard/schools/1/edit of the component SVG File Handler. This manipulation causes cross site scripting. The attack is possible to be carried out remotely. Th</description></item><item><title>CVE-2025-12918: A security flaw has been discovered in yungifez Skuul School Management System up to 2.6.5</title><link>https://patchthecve.com/cve/CVE-2025-12918.html</link><guid>https://patchthecve.com/cve/CVE-2025-12918.html</guid><pubDate>Sun, 18 Oct 2026 21:10:00 +0000</pubDate><description>LOW 3.1: A security flaw has been discovered in yungifez Skuul School Management System up to 2.6.5. The impacted element is an unknown function of the file /dashboard/fees/fee-invoices/ of the component View Fee Invoice. Performing manipulation of the argument invoice_id results in improper control of resou</description></item></channel></rss>