CVE-2026-10112
LowCVSS 2.4Exploitation Probability (EPSS)
Low risk11th percentile - higher than 11% of all known CVEs
Summary
A cross-site scripting vulnerability was found in sambitraj STUDENT-MANAGEMENT-SYSTEM 1.0 on the Dashboard page. Manipulating the Name argument allows remote script execution. The exploit is public, and the project has not responded.
Risk Assessment
Attackers can inject malicious JavaScript, potentially leading to theft of student data or admin session hijacking.
Recommendation
Immediately secure the Dashboard page by filtering input and restrict access to the system.
Original NVD description (English source)
A vulnerability has been found in sambitraj STUDENT-MANAGEMENT-SYSTEM 1.0. Affected is an unknown function of the component Dashboard Page. The manipulation of the argument Name leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The project was informed of the problem early through an issue report but has not responded yet.