Skip to content
OpenAdvisories

Vendor

francoisjacquet

16 known vulnerabilities.

Products

francoisjacquet/rosariosis 8 RosarioSIS 8
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Low 2.7
    CVE-2026-121732

    RosarioSIS before 12.9 Improper Authorization via Student Billing Mass Assignment

    RosarioSIS before 12.9 contains an improper authorization vulnerability that allows school-scoped administrators to assign fees and payments to students of other schools via MassAssignFees.php and MassAssignPayments.php. Attackers can substitute foreign stude…

    francoisjacquet RosarioSIS
  • Low 3.5
    CVE-2024-3138

    francoisjacquet RosarioSIS Add Portal Note cross site scripting

    ** DISPUTED ** A vulnerability was found in francoisjacquet RosarioSIS 11.5.1. It has been rated as problematic. This issue affects some unknown processing of the component Add Portal Note. The manipulation leads to cross site scripting. The attack may be ini…

    francoisjacquet RosarioSIS francoisjacquet/rosariosis Packagist