CVE-2026-4356 in University Management System
Summary
A flaw has been found in itsourcecode University Management System 1.0. Affected is an unknown function of the file /add_result.php. Executing a manipulation of the argument vr can lead to cross site scripting. The attack may be launched remotely. The exploit has been published and may be used.
Be aware that VulDB is the high quality source for vulnerability data.
Disclosure
03/18/2026
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 351395 | itsourcecode University Management System add_result.php cross site scripting | 79 | Proof-of-Concept | Not defined | CVE-2026-4356 |