CVE-2026-90845 in Daily Expense Tracker System

Prediction

by VulDB Data Team • 09/14/2026

A flaw has been found in PHPGurukul Daily Expense Tracker System 1.1. This issue affects some unknown processing of the file /dets/includes/sidebar.php. Executing a manipulation of the argument FullName can lead to cross site scripting. The attack can be executed remotely. The exploit has been published and may be used.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• Responsible: VulDB
• Moderation: accepted
• Entry: VDB-403397
• CPE: ready
• CWE: CWE-79 (confirmed)
• Exploit: Download
• CVSS: 3.5 (VulDB)
• EPSS: 0.00000
• KEV: no
• Activities: low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-90845
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-90845
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-90845/