CVE-2025-13468

HIGH 8.1CVE-2025-13468 · Published 20/11/2025 · updated 18/10/2026

In short

CVE-2025-13468 is a HIGH (CVSS 8.1) vulnerability affecting alumni management system (oretnom23).
Chance of exploitation in the next 30 days (EPSS): 0.41%, higher than 35.2% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
alumni management system oretnom23	`= 1.0`	No fix yet

Description

A weakness has been identified in SourceCodester Alumni Management System 1.0. This issue affects the function delete_forum/delete_career/delete_comment/delete_gallery/delete_event of the file admin/admin_class.php of the component Delete Handler. Executing manipulation of the argument ID can lead to missing authorization. It is possible to launch the attack remotely. The exploit has been made available to the public and could be exploited.

References

hackmd.io/@mlgzackfly/SourceCodester · Exploit
vuldb.com · Permissions Required
vuldb.com · Third Party Advisory
vuldb.com · Third Party Advisory
sourcecodester.com · Product

More vulnerabilities in alumni management system

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free