CVE-2026-105809
SourceCodester Simple Student Information System
Published 6 Oct 2026 · updated 6 Oct 2026 · Received
2.1 Low · CVSS 4.0, vuldb.com
Description
A vulnerability was identified in SourceCodester Simple Student Information System 1.0. This issue affects some unknown processing of the file /register.php of the component Profile Field Handler. The manipulation of the argument firstname/lastname leads to cross site scripting. The attack may be initiated remotely. The exploit is publicly available and might be used.