CVE-2026-37750

Published April 28th, 2026

View on NVD ↗

CVSS v3

6.1

MEDIUM

CVSS v2

N/A

Affected

PROJECTS

Description

A reflected Cross-Site Scripting (XSS) vulnerability in School Management System by mahmoudai1 allows unauthenticated remote attackers to execute arbitrary JavaScript in victim's browsers via the unsanitized type parameter in register.php.

mahmoudai1/school-management-system

School Management System developed by PHP and MySQL.

GitHub

menevarad007/CVE-2026-37750

CVE-2026-37750 — School Management System 1.0 - Reflected XSS

GitHub