What’s Vulnerable › Vulnerabilities

CVE-2025-11661: ProjectsAndPrograms School Management System missing authentication

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2025-10-13 · updated 2026-10-08
• Weakness: CWE-287

Description

A vulnerability was found in ProjectsAndPrograms School Management System up to 6b6fae5426044f89c08d0dd101c7fa71f9042a59. This affects an unknown part. Performing manipulation results in missing authentication. The attack is possible to be carried out remotely. The exploit has been made public and could be used. This product adopts a rolling release strategy to maintain continuous delivery

Affected products

• ProjectsAndPrograms School Management System: 1.0

References

• https://github.com/qqy-123/cve/issues/6
• https://vuldb.com/?ctiid.328078
• https://vuldb.com/?id.328078
• https://vuldb.com/?submit.665611

Get alerted when CVE-2025-11661 or the next vulnerability affects your stack