CVE-2026-120343

mathurvishal CloudClassroom-PHP-Project manageassessment2.php cross site scripting

Assigner: VulDB
Reserved: 01.11.2026 Published: 02.11.2026 Updated: 02.11.2026

A flaw has been found in mathurvishal CloudClassroom-PHP-Project. The impacted element is an unknown function of the file manageassessment2.php. This manipulation of the argument ExamName/Q1/Q2/Q3/Q4/Q5 causes cross site scripting. The attack is possible to be carried out remotely. The exploit has been published and may be used. This product adopts a rolling release strategy to maintain continuous delivery. Therefore, version details for affected or updated releases cannot be specified. The vendor was contacted early about this disclosure but did not respond in any way.

Metrics

CVSS Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P
CVSS Score: 5.3

Exploitability Metrics		Vulnerable System Impact Metrics		Subsequent System Impact Metrics
Attack Vector	Network	Confidentiality	None	Confidentiality	None
Attack Complexity	Low	Integrity	Low	Integrity	None
Attack Requirements	None	Availability	None	Availability	None
Privileges Required	None
User Interaction	Passive

CVSS 4.0

CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:X/RC:C
CVSS Score: 4.3

Attack Vector	Network	Scope	Unchanged
Attack Complexity	Low	Confidentiality Impact	None
Privileges Required	None	Integrity Impact	Low
User Interaction	Required	Availability Impact	None

CVSS 3.1

CVSS Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:X/RC:C
CVSS Score: 4.3

Attack Vector	Network	Scope	Unchanged
Attack Complexity	Low	Confidentiality Impact	None
Privileges Required	None	Integrity Impact	Low
User Interaction	Required	Availability Impact	None

CVSS 3.0

CVSS Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N/E:POC/RL:ND/RC:C
CVSS Score: 5

Access Vector	Network	Confidentiality Impact	None
Access Complexity	Low	Integrity Impact	Partial
Authentication	None	Availability Impact	None

CVSS 2.0

Product Status

Vendor	mathurvishal
Product	CloudClassroom-PHP-Project
Versions	Version 5dadec098bfbbf3300d60c3494db3fb95b66e7be is affected Version c46ce5736007d9d6e51a8feeb9250729fe85f139 is affected Version dae0c5961a35a4faf28cde9e02117538f09f81c1 is affected

Vendor

mathurvishal

Product

CloudClassroom-PHP-Project

Versions

Version 5dadec098bfbbf3300d60c3494db3fb95b66e7be is affected
Version c46ce5736007d9d6e51a8feeb9250729fe85f139 is affected
Version dae0c5961a35a4faf28cde9e02117538f09f81c1 is affected

Credits

fernando viana (VulDB User) reporter
VulDB CNA Team coordinator

References

Problem Types