CVE-2026-3403: PHPGurukul Student Record Management System edit-subject.php cross site scripting
A vulnerability was detected in PHPGurukul Student Record Management System 1.0. This issue affects some unknown processing of the file /edit-subject.php. Performing a manipulation of the argument Subject 1 results in cross site scripting. The attack is possible to be carried out remotely. The exploit is now public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-3403?
CVE-2026-3403 is classified as a medium severity vulnerability due to its potential for exploitation through cross-site scripting.
How do I mitigate CVE-2026-3403?
To mitigate CVE-2026-3403, ensure that all user inputs in the edit-subject.php file are properly validated and sanitized.
What is the exploit mechanism for CVE-2026-3403?
The exploit mechanism for CVE-2026-3403 involves manipulating the 'Subject' argument in the edit-subject.php file, leading to cross-site scripting attacks.
Which version of PHPGurukul Student Record Management System does CVE-2026-3403 affect?
CVE-2026-3403 specifically affects PHPGurukul Student Record Management System version 1.0.
Is there a patch available for CVE-2026-3403?
Currently, there is no official patch for CVE-2026-3403, so it is advised to apply protective measures as soon as possible.