Threats tagged 'ghsa-fp65-cx5q-8fg9'

The School Management System – WPSchoolPress plugin for WordPress contains a SQL Injection vulnerability in the 'SCodes' parameter affecting all versions up to and including 2.2.23. This flaw allows authenticated users with administrator-level privileges or higher to inject additional SQL queries, potentially exposing sensitive database information. The vulnerability arises from insufficient escaping of user input and inadequate preparation of SQL queries.