Mojoomla School Management Unrestricted File Upload Vulnerability Allowing Web Shell Upload
Vulnerability
A vulnerability allowing unrestricted file upload has been identified in the Mojoomla School Management plugin, affecting versions through 1.93.1 (02-07-2025). This vulnerability could be exploited to upload a web shell to the server, potentially leading to unauthorized access and execution of malicious actions.
Impact
Exploitation of this vulnerability could allow a malicious actor to upload any type of file, including backdoors that could be executed to gain further access to the website.
Remediation
Users are advised to update to a version of the Mojoomla School Management plugin that is not affected by this vulnerability. Patchstack has issued a virtual patch to block attacks targeting this vulnerability until an official fix is available.
Vulnerability Rating
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.