| Package | Affected versions | Patched versions |
|---|---|---|
| edupluscampus | = 3.0.1 |
An Insecure Direct Object Reference (IDOR) vulnerability in the EduplusCampus 3.0.1 Student Payment API allows authenticated users to access other students personal and financial records by modifying the 'rec_no' parameter in the /student/get-receipt endpoint.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free