CVE-2025-11661CWE-287CWE-306

CVE-2025-11661

High · published October 13, 2025

CVSS v3.1
7.3
EPSS
1%
Percentile
45.0
In the wild
Unconfirmed
What it is

A vulnerability was found in ProjectsAndPrograms School Management System up to 6b6fae5426044f89c08d0dd101c7fa71f9042a59. This affects an unknown part. Performing manipulation results in missing authentication. The attack is possible to be carried out remotely. The exploit has been made public and could be used. This product adopts a rolling release strategy to maintain continuous delivery

The record
Technical detail
CVSS v3.1
7.3 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00546 · 45.0th percentile
Weaknesses
CWE-287 · Improper Authentication; CWE-306 · Missing Authentication for Critical Function
Published
2025-10-13T09:15Z
Affected products (1)
ProductVersionsFixed in
oranbyte/school_management_systemall versions—
References (4)
https://github.com/qqy-123/cve/issues/6 · [email protected]https://vuldb.com/?ctiid.328078 · [email protected]https://vuldb.com/?id.328078 · [email protected]https://vuldb.com/?submit.665611 · [email protected]
EPSS history
Timeline
  • 13 OCT 04:32Z
    ProjectsAndPrograms School Management System missing authentication
    cvelistv5