CVE-2026-9471

LOW 3.5

yashpokharna2555 StudentManagementSystem student.php cross site scripting

CVSS Score

3.5

EPSS Score

0.0%

EPSS Percentile

0th

A vulnerability was detected in yashpokharna2555 StudentManagementSystem cb2f558ddf8d19396de0f92abf2d224d46a0a203. This impacts an unknown function of the file /student.php. Performing a manipulation of the argument FIRST_NAME results in cross site scripting. The attack can be initiated remotely. The exploit is now public and may be used. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available. The project was informed of the problem early through an issue report but has not responded yet.

CWE	CWE-79 CWE-94
Vendor	yashpokharna2555
Product	studentmanagementsystem
Published	May 25, 2026
Last Updated	May 26, 2026

Stay Ahead of the Next One

Get instant alerts for yashpokharna2555 studentmanagementsystem

Be the first to know when new low vulnerabilities affecting yashpokharna2555 studentmanagementsystem are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N/E:P/RL:X/RC:R

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Scope

Confidentiality

Integrity

Availability

Affected Versions

yashpokharna2555 / StudentManagementSystem

cb2f558ddf8d19396de0f92abf2d224d46a0a203

References

NVD ↗ CVE.org ↗ EPSS Data ↗

vuldb.com: https://vuldb.com/vuln/365452 vuldb.com: https://vuldb.com/vuln/365452/cti vuldb.com: https://vuldb.com/submit/814002 github.com: https://github.com/yashpokharna2555/StudentManagementSystem/issues/4 github.com: https://github.com/yashpokharna2555/StudentManagementSystem/

Credits

🔍 P4tt0n (VulDB User) VulDB CNA Team