francoisjacquet RosarioSIS

• CVE-2026-121732 Low 2.7 RosarioSIS before 12.9 Improper Authorization via Student Billing Mass Assignment 0.2%
• CVE-2026-121731 High 8.8 RosarioSIS before 12.9 SQL Injection via period_id in Attendance Absence Report 0.3%
• CVE-2026-116217 Medium 6.1 RosarioSIS before 12.9.2 Reflected XSS via menu_id in MenuReports.php 0.3%
• CVE-2026-116010 Medium 4.3 RosarioSIS before 12.9.1 Missing Authorization in Teacher Save Handlers 0.2%
• CVE-2026-19786 Medium 4.3 francoisjacquet RosarioSIS Modules.php cross-site request forgery 0.2%
• CVE-2026-19785 Medium 6.3 francoisjacquet RosarioSIS Student Medical Medical.inc.php sql injection 0.3%
• CVE-2026-19784 Medium 4.3 francoisjacquet RosarioSIS Referrals.php DBUpdate authorization 0.5%
• CVE-2024-3138 Low 3.5 francoisjacquet RosarioSIS Add Portal Note cross site scripting 0.5%