Qdocs - vulnerabilities (CVEs)

7 CVEs in 4 products, 0 in the last 30 days, newest from 2026-03-27.

Products

CVE-2026-4991 - CVSS 5.1 (medium), 2026-03-27: A vulnerability was detected in QDOCS Smart School Management System up to 7.2. The impacted element is an unknown function of the file /admin/enquiry of the…
CVE-2025-41107 - CVSS 5.4 (medium), 2025-11-10: Stored Cross Site Scripting (XSS) vulnerability in Smart School 7.0 due to lack of proper validation of user input when sending a POST request to…
CVE-2025-60500 - CVSS 7.2 (high), 2025-10-21: QDocs Smart School Management System 7.1 allows authenticated users with roles such as "accountant" or "admin" to bypass file type restrictions in the media…
CVE-2024-8784 - CVSS 8.8 (high), 2024-09-13: A vulnerability classified as critical was found in QDocs Smart School Management System 7.0.0. Affected by this vulnerability is an unknown functionality of…
CVE-2024-34240 - CVSS 6.1 (medium), 2024-05-21: QDOCS Smart School 7.0.0 is vulnerable to Cross Site Scripting (XSS) resulting in arbitrary code execution in admin functions related to adding or updating…
CVE-2023-5495 - CVSS 9.8 (critical), 2023-10-10: A vulnerability was found in QDocs Smart School 6.4.1. It has been classified as critical. This affects an unknown part of the file /course/filterRecords/ of…
CVE-2020-36011 - CVSS 4.8 (medium), 2021-01-26: A cross-site scripting (XSS) issue in Add Patient Form in QDOCS Smart Hospital Management System 3.1 allows a remote attacker to inject arbitrary code via the…