CVE-2026-97650 | ningzichun student-management-system up to 98760f5711cf6dc8b4adca53a9e207ca49b02ebf admin/fun/addLog.php echo reason/detail cross site scripting (Issue 11)

September 24, 2026 Yanac

A vulnerability classified as problematic has been found in ningzichun student-management-system up to 98760f5711cf6dc8b4adca53a9e207ca49b02ebf. Affected by this issue is the function echo of the file admin/fun/addLog.php. The manipulation of the argument reason/detail leads to cross site scripting.

This vulnerability is documented as CVE-2026-97650. The attack can be initiated remotely. Additionally, an exploit exists.

The project was informed of the problem early through an issue report but has not responded yet.VulDB Recent EntriesRead More