Unknown · Cyber-Iii Student-Management-System · CVE-2026-5668
Name of the Vulnerable Software and Affected Versions
Cyber-III Student-Management-System versions up to 1a938fa61e9f735078e9b291d2e6215b4942af3f
Description
A flaw exists in Cyber-III Student-Management-System that allows for cross site scripting through manipulation of the `$ SERVER['PHP SELF']` argument in the file '/admin/Add%20notice/add%20notice.php'. The attack can be initiated remotely. The exploit has been published.
Recommendations
Update to a version beyond 1a938fa61e9f735078e9b291d2e6215b4942af3f.