CVE-2026-4356: itsourcecode University Management System add_result.php cross site scripting
A flaw has been found in itsourcecode University Management System 1.0. Affected is an unknown function of the file /addresult.php. Executing a manipulation of the argument vr can lead to cross site scripting. The attack may be launched remotely. The exploit has been published and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-4356?
CVE-2026-4356 is classified as a moderate severity vulnerability due to its potential to exploit cross-site scripting.
How do I fix CVE-2026-4356?
To fix CVE-2026-4356, ensure that input validations and output encoding are implemented on the vr parameter in the add_result.php file.
Which software is affected by CVE-2026-4356?
CVE-2026-4356 affects the itsourcecode University Management System version 1.0.
What types of attacks can CVE-2026-4356 facilitate?
CVE-2026-4356 can facilitate cross-site scripting (XSS) attacks through manipulation of the vr parameter.
Are there any known exploits for CVE-2026-4356?
As of now, there are no publicly available exploits for CVE-2026-4356, but the vulnerability presents a risk for potential exploitation.