Pre-School Enrollment version 1.0 is vulnerable to SQL Injection via the username parameter in preschool/admin/ page.
9.8CVSS
9.7AI Score
0.001EPSS
Pre-School Enrollment version 1.0 is vulnerable to Cross Site Scripting (XSS) on the profile.php page via fullname parameter.
5.4CVSS
5.3AI Score
0.0004EPSS