CVE-2026-3402: PHPGurukul Student Record Management System edit-course.php cross site scripting
A security vulnerability has been detected in PHPGurukul Student Record Management System up to 1.0. This vulnerability affects unknown code of the file /edit-course.php. Such manipulation of the argument Course Short Name leads to cross site scripting. The attack can be executed remotely. The exploit has been disclosed publicly and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-3402?
CVE-2026-3402 is classified as a medium severity vulnerability due to its potential for cross-site scripting attacks.
How do I fix CVE-2026-3402?
To fix CVE-2026-3402, ensure that user input is properly sanitized and validated before being output in a web context.
What versions of PHPGurukul Student Record Management System are affected by CVE-2026-3402?
CVE-2026-3402 affects all versions of PHPGurukul Student Record Management System up to and including 1.0.
What type of vulnerability is CVE-2026-3402?
CVE-2026-3402 is a cross-site scripting (XSS) vulnerability found in the edit-course.php file.
Where in the PHPGurukul Student Record Management System is CVE-2026-3402 located?
CVE-2026-3402 is located in the edit-course.php file, specifically affecting the handling of course short name arguments.