PT-2026-24921 · Itsourcecode · University Event Management System

Pipizzz · Published 2026-03-12 · Updated 2026-03-12 · CVE-2026-3982

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions itsourcecode University Management System version 1.0

Description A flaw exists in itsourcecode University Management System that allows for cross site scripting. This issue is related to an unknown functionality within the /view result.php file. Manipulating the vr argument can trigger the flaw, allowing for remote execution of attacks. The exploit for this issue has been publicly disclosed.

Recommendations Versions prior to 1.0 should be updated. As a temporary workaround, consider restricting access to the /view result.php file to minimize the risk of exploitation. Avoid manipulating the vr argument in the affected API endpoint until the issue is resolved.

Exploit

Fix

Code Injection

XSS

Weakness Enumeration

CWE-94

CWE-79

Related Identifiers

CVE-2026-3982

Affected Products

University Event Management System

References · 10

• 🔥 https://github.com/PIPIzzz1/aaa/issues/1 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-3982 · Security Note
• https://t.me/cveNotify/155228 · Telegram Post
• https://itsourcecode.com · Note
• https://vuldb.com/?id.350417 · Note
• https://t.me/CVEtracker/47230 · Telegram Post
• https://vuldb.com/?ctiid.350417 · Note
• https://twitter.com/CVEnew/status/2031992334473396307 · Twitter Post
• https://twitter.com/CVEarity/status/2032100367488729153 · Twitter Post
• https://vuldb.com/?submit.769668 · Note