Campcodes School Fees Payment Management System 1.0 contains a security flaw in the /ajax.php file that allows remote attackers to perform SQL injection. This vulnerability has a medium severity score of 6.3 and public exploit code is available. The flaw can lead to limited confidentiality, integrity, and availability impacts. No specific affected versions or patches are currently identified.