A vulnerability classified as critical has been found in CodeAstro Online Classroom 1.0. This vulnerability affects unknown code of the file /OnlineClassroom/addassessment.php of the component Parameter Handler. Performing a manipulation of the argument deleteid results in sql injection.

This vulnerability is reported as CVE-2026-5578. The attack is possible to be carried out remotely. Moreover, an exploit is present.