CVE-2026-3402

CWE-79 — Cross-site Scripting (XSS)CWE-94 — Code Injection3 documents3 sources
Severity
4.8MEDIUM
EPSS
0.0%
top 88.60%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Phpgurukul Student Record Management SystemPhpgurukul Student Record System
Timeline
PublishedMar 2

Description

A security vulnerability has been detected in PHPGurukul Student Record Management System up to 1.0. This vulnerability affects unknown code of the file /edit-course.php. Such manipulation of the argument Course Short Name leads to cross site scripting. The attack can be executed remotely. The exploit has been disclosed publicly and may be used.

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N

Affected Packages2 packages

🔴Vulnerability Details

2
GHSA
GHSA-xxj6-rqj3-p32w: A security vulnerability has been detected in PHPGurukul Student Record Management System up to 1↗2026-03-02
▶
CVEList
PHPGurukul Student Record Management System edit-course.php cross site scripting↗2026-03-02
▶
CVE-2026-3402 (MEDIUM CVSS 4.8) | A security vulnerability has been d | cvebase.io