Vulnerability · Published Jun 13, 2026 · Assigned by VulDB
CVE-2026-12176SourceCodester CET Automated Grading System with AI Predictive Analytics index.php cross site scripting
Medium 4.3
In plain English
A medium-severity cross-site scripting in CET Automated Grading System with AI Predictive Analytics from SourceCodester. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 19% of all known vulnerabilities).
Official description
A vulnerability has been found in SourceCodester CET Automated Grading System with AI Predictive Analytics 1.0. The impacted element is an unknown function of the file /index.php. The manipulation of the argument action leads to cross site scripting. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be used.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| SourceCodester | CET Automated Grading System with AI Predictive Analytics | 1.0 |
Weakness: CWE-79, CWE-94 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:X/RC:R
References
- VDB-370818 | SourceCodester CET Automated Grading System with AI Predictive Analytics index.php cross site scripting vdb-entry, technical-description
- VDB-370818 | CTI Indicators (IOB, IOC, TTP, IOA) signature, permissions-required
- CVE-2026-12176 | CVE Analysis and Report third-party-advisory
- Submit #837732 | https://www.sourcecodester.com/ CET Automated Grading System with AI Predictive Analytics in PHP and MySQL Version: 1.0 Cross Site Scripting - Reflected XSS third-party-advisory
- https://www.sourcecodester.com/ product