PT-2026-28709 · Unknown · Qdocs Smart School Management System

Casmit2004 + 1 · Publicado 2026-03-27 · Atualizado 2026-03-28 · CVE-2026-4991

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Média

Vetor base

AV:N/AC:L/Au:S/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions QDOCS Smart School Management System versions up to 7.2

Description A cross site scripting issue exists in QDOCS Smart School Management System. The issue is located in the Admission Enquiry Module, specifically within the /admin/enquiry file. Manipulating the Note argument can trigger the issue. The attack can be carried out remotely.

Recommendations Versions prior to 7.2 should be updated.

Correção

XSS

Code Injection

Enumeração de Fraquezas

CWE-79

CWE-94

Identificadores relacionados

CVE-2026-4991

Produtos afetados

Qdocs Smart School Management System

Referências · 7

• https://vuldb.com/?ctiid.353878 · Nota
• https://vuldb.com/?id.353878 · Nota
• https://twitter.com/cyberbivash/status/2037752646535168473 · Publicação no Twitter
• https://twitter.com/CVEnew/status/2037719349423972435 · Publicação no Twitter
• https://twitter.com/cyberbivash/status/2037722962237747200 · Publicação no Twitter
• https://vuldb.com/?submit.776300 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-4991 · Nota de Segurança