CVE-2026-105808
LowCVSS 3.5Exploitation Probability (EPSS)
Low risk17th percentile - higher than 17% of all known CVEs
Summary
A vulnerability was determined in SourceCodester Simple Student Information System 1.0. This vulnerability affects the function clean of the file searchresults.php. Executing a manipulation of the argument searchbox can lead to cross site scripting. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized.
Risk Assessment
The risk includes the possibility of executing scripts in the victim's browser, which could lead to session theft, account takeover, or other phishing attacks.
Recommendation
It is recommended to immediately validate and sanitize input in searchresults.php and update the system to the latest version or apply security patches.
Other vulnerabilities in SourceCodester Simple Student Information System
Original NVD description (English source)
A vulnerability was determined in SourceCodester Simple Student Information System 1.0. This vulnerability affects the function clean of the file searchresults.php. Executing a manipulation of the argument searchbox can lead to cross site scripting. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS