CVE-2026-37750

Summary

A reflected Cross-Site Scripting (XSS) vulnerability in School Management System by mahmoudai1 allows unauthenticated remote attackers to execute arbitrary JavaScript in victim's browsers via the unsanitized type parameter in register.php.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: poc
  • Automatable: no
  • Technical Impact: partial

Additional References

• https://github.com/menevarad007/CVE-2026-37750

References

• https://github.com/mahmoudai1/school-management-system
• https://github.com/mahmoudai1/school-management-system/blob/main/register.php
• https://github.com/menevarad007/CVE-2026-37750

• ←Previous
• Next→