CVE-2026-105809
MEDIUM
NVD
CVSS Score
4.3
Severity
MEDIUM
Published
Oct 06, 2026
Vendor
unknown
Description
A vulnerability was identified in SourceCodester Simple Student Information System 1.0. This issue affects some unknown processing of the file /register.php of the component Profile Field Handler. The manipulation of the argument firstname/lastname leads to cross site scripting. The attack may be initiated remotely. The exploit is publicly available and might be used.