Vulnerability · Published Sep 27, 2026 · Assigned by VulDB

CVE-2026-100873mathurvishal CloudClassroom-PHP-Project cross-site request forgery

Medium 4.3

In plain English

A medium-severity cross-site request forgery in CloudClassroom-PHP-Project from mathurvishal. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 5% of all known vulnerabilities).

Severity (CVSS 3.1)4.3Medium

Exploit odds (30 days)0.2%top 95.4% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

A vulnerability was detected in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. The impacted element is an unknown function. The manipulation results in cross-site request forgery. The attack can be launched remotely. The exploit is now public and may be used. This product does not use versioning. This is why information about affected and unaffected releases are unavailable. The vendor was contacted early about this disclosure but did not respond in any way.

Affected products (as reported)

Vendor	Product	Versions
mathurvishal	CloudClassroom-PHP-Project	5dadec098bfbbf3300d60c3494db3fb95b66e7be

Weakness: CWE-352, CWE-862 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:X/RC:C

References

VDB-410803 | mathurvishal CloudClassroom-PHP-Project cross-site request forgery vdb-entry
VDB-410803 | CTI Indicators (IOB, IOC) signature, permissions-required
CVE-2026-100873 | CVE Analysis and Report third-party-advisory
Submit #915270 | https://github.com/mathurvishal/CloudClassroom-PHP-Project CloudClassroom-PHP-Project 5dadec098bfbbf3300d60c3494db3fb95b66e7be Cross-Site Request Forgery third-party-advisory
https://github.com/vinniboy021-blip/Advisory/blob/main/csrf.md broken-link, exploit