CVE-2026-2939

Published February 22nd, 2026

View on NVD ↗

CVSS v3

2.4

LOW

CVSS v2

3.3

LOW

Affected

PROJECT

Description

A vulnerability was found in itsourcecode Student Management System 1.0. The impacted element is an unknown function of the file /add_student/ of the component Add Student Module. The manipulation results in cross site scripting. It is possible to launch the attack remotely. The exploit has been made public and could be used.

AS-AbdulSamad/CVE-1

ITSOURCECODE - SMSv1.0 - Stored Cross-Site Scripting (XSS) via SVG File Upload

GitHub