CVE-2026-90850 in Hostel Management System

Prediction

by VulDB Data Team • 09/14/2026

A vulnerability was detected in PHPGurukul Hostel Management System 3.0. Affected by this issue is some unknown functionality of the file /admin/manage-students.php. The manipulation results in cross site scripting. The attack may be launched remotely. The exploit is now public and may be used.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Responsible: VulDB
• Moderation: accepted
• Entry: VDB-403405
• CPE: ready
• CWE: CWE-79 (confirmed)
• Exploit: Download
• CVSS: 2.4 (VulDB)
• EPSS: 0.00000
• KEV: no
• Activities: low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-90850
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-90850
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-90850/