CVE-2026-9517

HighCVSS 7.3

Published: 26/05/2026(UTC)Updated: 23/07/2026(UTC)Translated: 24/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.39%

32th percentile - higher than 32% of all known CVEs

Summary

hemant6488 CodeIgniter-StudentManagementSystem has a vulnerability in the /index.php/students/addStudentView function that allows improper access controls. The attack can be executed remotely and the exploit has been publicly disclosed.

Risk Assessment

Risk of unauthorized access to student management functions, potentially leading to data modification or privilege escalation.

Recommendation

Immediately implement access control fixes or disable the vulnerable component until an official patch is released.

Other vulnerabilities in CodeIgniter-StudentManagementSystem

CVE-2026-9518Medium
XSS vulnerability in the addStudent function of the Students Controller in CodeIgniter-StudentManagementSystem. Manipulation of the Name argument leads to cross-site scripting.

Original NVD description (English source)

A vulnerability was determined in hemant6488 CodeIgniter-StudentManagementSystem. The affected element is an unknown function of the file /index.php/students/addStudentView of the component Student Management Handler. Executing a manipulation can lead to improper access controls. The attack can be executed remotely. The exploit has been publicly disclosed and may be utilized. This product implements a rolling release for ongoing delivery, which means version information for affected or updated releases is unavailable. The project was informed of the problem early through an issue report but has not responded yet.