Undefined · Undefined · CVE-2026-37750
**Name of the Vulnerable Software and Affected Versions**
School Management System by mahmoudai1 (affected versions not specified)
**Description**
A reflected Cross-Site Scripting (XSS) issue allows unauthenticated remote attackers to execute arbitrary JavaScript in a victim's browser. This occurs because the `type` parameter in the 'register.php' endpoint is not properly sanitized. Cross-Site Scripting is a flaw that allows an attacker to inject malicious scripts into web pages viewed by other users.
**Recommendations**
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Avoid using the `type` parameter in the 'register.php' endpoint until the issue is resolved.