This vulnerability (CVE-2025-15656) in Mojoomla School Management involves incorrect privilege assignment, categorized under CWE-266. It allows users with limited privileges to escalate their rights, potentially gaining unauthorized access or control within the affected system. The CVSS 3.1 score of 8.8 reflects a network attack vector with low attack complexity, requiring some privileges but no user interaction, and resulting in high impact on confidentiality, integrity, and availability. The affected product versions include all versions up to 93.2.0. No patch or official remediation level has been published yet.

Successful exploitation of this vulnerability could allow an attacker with some privileges to escalate their access rights, potentially leading to full system compromise, data exposure, or disruption of service. The high CVSS score indicates critical impacts on confidentiality, integrity, and availability of the system.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, limit user privileges to the minimum necessary and monitor for suspicious privilege escalations. Avoid granting unnecessary privileges to users in the affected versions.