School Management System commit bae5aa was discovered to contain a SQL injection vulnerability via the medium parameter at paidclass.php.