CVE-2026-86278
MediumCVSS 4.3Summary
A vulnerability was found in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0 involving an unknown function of the file manage_subjects.php. Manipulation of the arguments msg/title/content results in cross site scripting. The attack may be performed remotely and the exploit is public.
Risk Assessment
An attacker may inject malicious scripts that execute in the victim's browser, potentially leading to data theft or session hijacking.
Recommendation
Sanitize input data and encode output to prevent XSS. Apply vendor patches as well.
Other vulnerabilities in SourceCodester Syllabus-Aligned Learning Management & Examination System
See all- CVE-2026-86280Medium
A vulnerability was identified in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0 involving an unknown function of the file cict_portal.sql. Manipulation leads to cleartext storage of sensitive information. The attack can be launched remotely and the exploit is publicly available.
- CVE-2026-86279Medium
A vulnerability was determined in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0 involving an unknown function of the file auth_process.php in the Login component. This manipulation causes session fixation. The attack can be initiated remotely and the exploit is publicly disclosed.
- CVE-2026-86277High
A vulnerability has been found in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. An unknown function in the file delete_exam.php is affected. Manipulation of the argument ID leads to authorization bypass. The attack can be carried out remotely and the exploit has been disclosed publicly.
- CVE-2026-86276High
A flaw has been found in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. This issue affects some unknown processing in the file db.php. Executing a manipulation can lead to hard-coded credentials. The attack can be executed remotely and the exploit has been published.
- CVE-2026-86275Medium
A vulnerability was detected in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0 affecting the register function of the file auth.php. Manipulation of the argument role results in improper privilege management. Remote exploitation is possible and the exploit is public.
Original NVD description (English source)
A vulnerability was found in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. The affected element is an unknown function of the file manage_subjects.php. The manipulation of the argument msg/title/content results in cross site scripting. The attack may be performed from remote. The exploit has been made public and could be used.