CVE-2026-105808: SourceCodester Simple Student Information System searchresults.php clean cross site scripting
A vulnerability was determined in SourceCodester Simple Student Information System 1.0. This vulnerability affects the function clean of the file searchresults.php. Executing a manipulation of the argument searchbox can lead to cross site scripting. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized.
Affected Software
Event History
Frequently Asked Questions
What access and interaction are required to exploit this issue?
The attack can be launched remotely, but the CVSS vector indicates that the attacker needs low-level privileges and user interaction. Exploitation involves manipulating the searchbox argument processed by searchresults.php.
Is there evidence that exploitation is practical?
Yes. A public exploit has been disclosed and may be used, which lowers the barrier for attackers able to meet the required access and interaction conditions.
Which deployment is identified as affected?
The affected product identified in the available data is SourceCodester Simple Student Information System version 1.0. The available information does not state whether other versions or default configurations are affected.