CVE-2026-38671 | Ellucian Banner Student Registration Self-Service up to 9.23 /ssb/registration mepCode cross site scripting

October 19, 2026 Yanac

A vulnerability marked as problematic has been reported in Ellucian Banner Student Registration Self-Service up to 9.23. Affected by this issue is some unknown functionality of the file /ssb/registration of the component Student Registration. This manipulation of the argument mepCode causes cross site scripting.

This vulnerability is registered as CVE-2026-38671. Remote exploitation of the attack is possible. No exploit is available.VulDB Recent EntriesRead More