PT-2026-35819 · Undefined · Undefined

Varad Ap Mene · Published 2026-04-28 · Updated 2026-04-28 · CVE-2026-37750

NVD

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

A reflected Cross-Site Scripting (XSS) vulnerability in School Management System by mahmoudai1 allows unauthenticated remote attackers to execute arbitrary JavaScript in victim's browsers via the unsanitized type parameter in register.php.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2026-37750

Affected Products

Undefined

References · 4

• 🔥 https://github.com/menevarad007/CVE-2026-37750 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-37750 · Security Note
• https://github.com/mahmoudai1/school-management-system/blob/main/register.php · Note
• https://github.com/mahmoudai1/school-management-system · Note