The School Management System for WordPress plugin is vulnerable to arbitrary file uploads due to missing file type validation in the homework.php file in all versions up to and including 93.2.0. This vulnerability allows authenticated attackers with Student-level access and above to upload arbitrary files on the affected site’s server, potentially leading to remote code execution.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 8.8 | CVE-2025-6079 |
Exploitation
To exploit this vulnerability, an authenticated attacker with at least Student-level access can upload arbitrary files through the homework.php file without proper file type validation. This could allow the attacker to upload malicious scripts or executables, which can then be executed on the server, leading to potential remote code execution.
Affected Products
- School Management System for WordPress: A plugin that allows educational institutions to manage their operations, which is vulnerable to file upload attacks.
Mitigation
To mitigate this vulnerability, it is recommended to update the School Management System for WordPress plugin to the latest version where the file type validation issue has been addressed. Additionally, implementing strict file upload controls and monitoring for unauthorized file uploads can help enhance security.