Medium severity4.3NVD Advisory· Published Oct 2, 2026· Updated Oct 2, 2026

CVE-2026-104612

Description

A vulnerability was found in SourceCodester Student Result Management System 1.0. This affects an unknown part of the file script/academic/core/new_announcement.php of the component Announcement Module. The manipulation of the argument title/announcement results in cross site scripting. It is possible to launch the attack remotely. The exploit has been made public and could be used.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Sourcecodester/Best Student Result Management Systemllm-fuzzy
Range: = 1.0

Patches

Vulnerability mechanics

References

github.com/Jack-MRJ/srms-vulnerabilities/blob/main/SRMS_Stored_XSS_VulDB_CVE_Report_v1.pdfnvd
vuldb.com/cve/CVE-2026-104612nvd
vuldb.com/submit/963426nvd
vuldb.com/vuln/412921nvd
vuldb.com/vuln/412921/ctinvd
www.sourcecodester.comnvd

News mentions

No linked articles in our index yet.

cvss	0.280
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000