PT-2026-28709 · Unknown · Qdocs Smart School Management System

Casmit2004 + 1 · Published 2026-03-27 · Updated 2026-03-28 · CVE-2026-4991

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Medium

Base vector

AV:N/AC:L/Au:S/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions QDOCS Smart School Management System versions up to 7.2

Description A cross site scripting issue exists in QDOCS Smart School Management System. The issue is located in the Admission Enquiry Module, specifically within the /admin/enquiry file. Manipulating the Note argument can trigger the issue. The attack can be carried out remotely.

Recommendations Versions prior to 7.2 should be updated.

Fix

XSS

Code Injection

Weakness Enumeration

CWE-79

CWE-94

Related Identifiers

CVE-2026-4991

Affected Products

Qdocs Smart School Management System

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2026-4991 · Security Note
• https://vuldb.com/?ctiid.353878 · Note
• https://vuldb.com/?id.353878 · Note
• https://twitter.com/cyberbivash/status/2037752646535168473 · Twitter Post
• https://twitter.com/CVEnew/status/2037719349423972435 · Twitter Post
• https://twitter.com/cyberbivash/status/2037722962237747200 · Twitter Post
• https://vuldb.com/?submit.776300 · Note