CVE-2026-3261 | itsourcecode School Management System 1.0 Setting /settings/index.php ID sql injection

A vulnerability classified as critical has been found in itsourcecode School Management System 1.0. This impacts an unknown function of the file /settings/index.php of the component Setting Handler. This manipulation of the argument ID causes sql injection.

This vulnerability appears as CVE-2026-3261. The attack may be initiated remotely. In addition, an exploit is available.