CVE-2026-75460
UNKNOWN
NVD
CVSS Score
0
Severity
UNKNOWN
Published
Aug 31, 2026
Vendor
unknown
Description
XueZhiSi Open Source Exam System <= 3.9.0 has a privilege escalation vulnerability in the teacher-end interface POST /api/teacher/user/page/list. The role parameter in UserPageRequestVM is fully controllable by the requester.