CVE-2026-10112mediumCWE-79CWE-94

CVE-2026-10112: medium-severity vulnerability in sambitraj STUDENT-MANAGEMENT-SYSTEM

sambitraj STUDENT-MANAGEMENT-SYSTEM Dashboard cross site scripting

Published · Updated

Follow this CVE+ Monitor Student-Management-System

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

33Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendcvss 4.8epss 0.2%
A vulnerability has been found in sambitraj STUDENT-MANAGEMENT-SYSTEM 1.0. Affected is an unknown function of the component Dashboard Page. The manipulation of the argument Name leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The project was informed of the problem early through an issue report but has not responded yet.
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P
Affected products
sambitraj · STUDENT-MANAGEMENT-SYSTEM
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Related CVEs — sambitraj STUDENT-MANAGEMENT-SYSTEM

In the same product, most dangerous first.

CVE-2026-9562MEDIUMsambitraj STUDENT-MANAGEMENT-SYSTEM Dashboard access controlEPSS 0.3%CVE-2026-10111MEDIUMsambitraj STUDENT-MANAGEMENT-SYSTEM Login Page sql injectionEPSS 0.3%