Unknown · Cyber-Iii Student-Management-System · CVE-2026-5644
Name of the Vulnerable Software and Affected Versions
Cyber-III Student-Management-System versions up to 1a938fa61e9f735078e9b291d2e6215b4942af3f
Description
A security flaw exists in Cyber-III Student-Management-System. Manipulation of the `$ SERVER['PHP SELF']` argument in an unknown function within the `/admin/Add%20notice/batch-notice.php` file can lead to cross site scripting. The attack can be initiated remotely. The exploit has been publicly released.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.