CVE-2026-10112: sambitraj STUDENT-MANAGEMENT-SYSTEM Dashboard cross site scripting
A vulnerability has been found in sambitraj STUDENT-MANAGEMENT-SYSTEM 1.0. Affected is an unknown function of the component Dashboard Page. The manipulation of the argument Name leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The project was informed of the problem early through an issue report but has not responded yet.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
sambitraj/STUDENT-MANAGEMENT-SYSTEM 1.0from your environment.If the application or the Dashboard component is not required, uninstall or take the affected application/component offline until a proper fix is implemented.
- Configuration
Validate and properly sanitize or HTML-escape the Dashboard 'Name' parameter on input and/or output to prevent cross-site scripting. If sanitization cannot be implemented immediately, disable or remove the Name field from the Dashboard.
STUDENT-MANAGEMENT-SYSTEM Dashboard Page Name parameter handling = sanitize/escape or disable - Compensating control
Restrict access to the Dashboard to trusted/internal IP addresses and/or place the application behind a web application firewall (WAF) with XSS protection rules to block malicious payloads until a code fix is available.
- Operational
Because an exploit has been publicly disclosed, review logs and monitoring for signs of exploitation, investigate and remediate any impacted accounts or data, and increase monitoring for attempted attacks against the Dashboard.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-10112?
The severity of CVE-2026-10112 is classified as low with a score of 2.4.
What type of vulnerability is CVE-2026-10112?
CVE-2026-10112 is a cross site scripting (XSS) vulnerability found in the Dashboard Page of sambitraj STUDENT-MANAGEMENT-SYSTEM.
How do I fix CVE-2026-10112?
To fix CVE-2026-10112, sanitize and validate all user input on the Dashboard Page to prevent cross site scripting attacks.
Can CVE-2026-10112 be exploited remotely?
Yes, CVE-2026-10112 can be exploited remotely due to its nature as a cross site scripting vulnerability.
What components of sambitraj STUDENT-MANAGEMENT-SYSTEM are affected by CVE-2026-10112?
CVE-2026-10112 affects the Dashboard Page component of sambitraj STUDENT-MANAGEMENT-SYSTEM 1.0.