CVE-2025-13272 is a SQL injection vulnerability in Campcodes School Fees Payment Management System 1.0 affecting an unknown function in /manage_course.php. The vulnerability allows remote attackers to manipulate the ID parameter to execute SQL injection attacks. Public exploit code is available. The vulnerability has a high severity with a CVSS score of 7.3.