Wirtualna Uczelnia vulnerabilities

2 known vulnerabilities in Wirtualna Uczelnia from Simple SA. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.3 Critical severity

  Wirtualna Uczelnia: Improper Neutralization of Special Elements Used in a Template Engine

  CVE-2026-34906Jun 2, 2026Simple SA

  Server-Side Template Injection (SSTI) in Wirtualna Uczelnia allows an unauthenticated attacker to perform Remote Code Execution (RCE). In the endpoint redirectToUrl and parameter redirectUrlParameter, insufficient input validation permits injection of arbitrar

• 9.3 Critical severity

  Wirtualna Uczelnia: Improper Neutralization of Directives in Dynamically Evaluated Code

  CVE-2025-12140Nov 27, 2025Simple SA

  The application contains an insecure 'redirectToUrl' mechanism that incorrectly processes the value of the 'redirectUrlParameter' parameter. The application interprets the entered string of characters as a Java expression, allowing an unauthenticated attacer t