Clickedu vulnerabilities

Products

• Clickedu 1
• SaaS platform 1

Latest Clickedu CVEs

Newest publication first

1. CVE-2026-2247 SQL Injection in Clickedu's SaaS platform

   Published 2026-02-17

   High·CVSS 8.3 EPSS 0.29%

   SQL injection vulnerability (SQLi) in Clicldeu SaaS, specifically in the generation of reports, which occurs when a previously authenticated remote attacker executes a malicious payload in the URL generated after downloading the student's report card in the ‘Day-to-day’ section f...

2. CVE-2025-40650 Insecure Direct Object Reference (IDOR) in Clickedu

   Published 2025-05-26

   High·CVSS 8.7 EPSS 0.37%

   Insecure Direct Object Reference (IDOR) vulnerability in Clickedu. This vulnerability could allow an attacker to retrieve information about student report cards.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.