Skip to content
OpenAdvisories
Critical · 9.3 CVE-2025-47573 EUVD-2025-18538GHSA-rmg5-5xw5-rw5p

WordPress School Management System Plugin <= 92.0.0 - SQL Injection vulnerability

Published Jun 17, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in mojoomla School Management allows Blind SQL Injection. This issue affects School Management: from n/a through 92.0.0.

Affected products

VendorProductAffectedFixed
mojoomla School Management ≤ 92.0.0 —

References