CVE-2026-7401 PUBLISHED

SourceCodester CET Automated Grading System with AI Predictive Analytics Registration index.php register cross site scripting

Assigner: VulDB
Reserved: 29.04.2026 Published: 29.04.2026 Updated: 29.04.2026

A vulnerability was detected in SourceCodester CET Automated Grading System with AI Predictive Analytics 1.0. This vulnerability affects unknown code of the file /index.php?action=register of the component Registration. The manipulation of the argument student_id/full_name/section/username results in cross site scripting. The attack can be launched remotely. The exploit is now public and may be used.

Metrics

CVSS Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P
CVSS Score: 5.3

Product Status

Vendor SourceCodester
Product CET Automated Grading System with AI Predictive Analytics
Versions
  • Version 1.0 is affected

Credits

  • imad alvi (VulDB User) reporter

References

Problem Types

  • Cross Site Scripting CWE
  • Code Injection CWE