CVE-2026-7401: SourceCodester CET Automated Grading System with AI Predictive Analytics Registration index.php register cross site scripting
A vulnerability was detected in SourceCodester CET Automated Grading System with AI Predictive Analytics 1.0. This vulnerability affects unknown code of the file /index.php?action=register of the component Registration. The manipulation of the argument studentid/fullname/section/username results in cross site scripting. The attack can be launched remotely. The exploit is now public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-7401?
CVE-2026-7401 is classified as a cross-site scripting (XSS) vulnerability which can lead to information disclosure and user session hijacking.
How do I fix CVE-2026-7401?
To mitigate CVE-2026-7401, sanitize user inputs in the /index.php register function to prevent XSS attacks.
What systems are affected by CVE-2026-7401?
CVE-2026-7401 affects SourceCodester CET Automated Grading System with AI Predictive Analytics version 1.0.
What kind of attacks can CVE-2026-7401 enable?
CVE-2026-7401 can enable attackers to execute malicious scripts in the context of a user's session.
Is there a patch available for CVE-2026-7401?
As of now, there is no official patch for CVE-2026-7401, so users should implement recommended coding practices to secure their systems.