| शीर्षक | code-projects Online Student Management System in PHP latest (no version specified by vendor) Cross-Site Scripting |
|---|
| विवरण | A stored cross-site scripting (XSS) vulnerability exists in the Online Student Management System in PHP. Authenticated administrators can inject arbitrary JavaScript code via the announcement management module. The malicious payload is stored in the backend database and executed automatically when other users view the affected announcement, leading to potential session hijacking and unauthorized actions.
|
|---|
| स्रोत | ⚠️ https://github.com/baguette168/CVE/issues/1 |
|---|
| उपयोगकर्ता | baguette168 (UID 94957) |
|---|
| सबमिशन | 28/01/2026 04:49 PM (8 महीनों पहले) |
|---|
| संयम | 07/02/2026 09:28 AM (10 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 344858 [code-projects Online Student Management System 1.0 Announcement Management index.php?view=add क्रॉस साइट स्क्रिप्टिंग] |
|---|
| अंक | 19 |
|---|