Igexsolutions vulnerabilities
We track 2 vulnerabilities in Igexsolutions products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on October 26, 2024.
2vulnerabilities
0critical
2high
0exploited
8.8average CVSS score
Latest Igexsolutions vulnerabilities
- 8.8 High severity
School Management System – WPSchoolPress: Authorization Bypass Through User-Controlled Key
The School Management System – WPSchoolPress plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 2.2.10. This is due to the plugin not properly validating a user's identity prior to updating the
- 8.8 High severity
School Management System: Improper Neutralization of Special Elements used in an SQL Command
The School Management System WordPress plugin before 2.2.5 uses the WordPress esc_sql() function on a field not delimited by quotes and did not first prepare the query, leading to a SQL injection exploitable by relatively low-privilege users like Teachers.