Vulnerability · Published Oct 6, 2026 · Assigned by VulDB
CVE-2026-105808SourceCodester Simple Student Information System searchresults.php clean cross site scripting
Low 3.5
In plain English
A low-severity cross-site scripting in Simple Student Information System from SourceCodester. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 18% of all known vulnerabilities).
Official description
A vulnerability was determined in SourceCodester Simple Student Information System 1.0. This vulnerability affects the function clean of the file searchresults.php. Executing a manipulation of the argument searchbox can lead to cross site scripting. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| SourceCodester | Simple Student Information System | 1.0 |
Weakness: CWE-79, CWE-94 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N/E:P/RL:X/RC:R
References
- VDB-413813 | SourceCodester Simple Student Information System searchresults.php clean cross site scripting vdb-entry, technical-description
- VDB-413813 | CTI Indicators (IOB, IOC, TTP, IOA) signature, permissions-required
- CVE-2026-105808 | CVE Analysis and Report third-party-advisory
- Submit #992608 | SourceCodester Simple Student Information System 1.0 Improper Neutralization of Alternate XSS Syntax third-party-advisory
- Submit #992613 | SourceCodester Simple Student Information System 1.0 Cross Site Scripting (Duplicate) third-party-advisory
- https://github.com/wsx138/cve/issues/6 exploit, issue-tracking
- https://www.sourcecodester.com/ product