This vulnerability (CVE-2025-48108) in Mojoomla School Management is classified as CWE-862 (Missing Authorization). It allows attackers with some privileges to bypass intended access controls due to misconfigured security levels, potentially leading to unauthorized modification of data (integrity impact). The CVSS 3.1 vector indicates network attack vector, low attack complexity, requires privileges, no user interaction, unchanged scope, no confidentiality impact, high integrity impact, and no availability impact. The affected versions include all up to 93.2.0, but specific version details are not provided. No patch or mitigation is currently documented by the vendor.

The vulnerability enables unauthorized modification of data within the affected application due to missing or incorrect authorization checks. This compromises data integrity but does not affect confidentiality or availability. There are no known active exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or patch links are provided, users should monitor Mojoomla's advisories for updates. In the meantime, review and tighten access control configurations to minimize risk of unauthorized actions.