CVE-2026-86278 PUBLISHED

A vulnerability was found in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. The affected element is an unknown function of the file manage_subjects.php. The manipulation of the argument msg/title/content results in cross site scripting. The attack may be performed from remote. The exploit has been made public and could be used.

• BI1IHA (VulDB User) reporter

• VDB-399439 | SourceCodester Syllabus-Aligned Learning Management & Examination System manage_subjects.php cross site scripting
• VDB-399439 | CTI Indicators (IOB, IOC, TTP, IOA)
• CVE-2026-86278 | CVE Analysis and Report
• Submit #904879 | SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0 Cross Site Scripting
• https://github.com/hackliu/Vulnerability-Reports/blob/master/Syllabus%20Aligned%20Learning%20Management%20Examination%20System/VULN-05-XSS-Reflected-Stored.md
• https://www.sourcecodester.com/

• Cross Site Scripting CWE
• Code Injection CWE