Medium severity4.3NVD Advisory· Published Nov 2, 2026

CVE-2026-120343

Description

A flaw has been found in mathurvishal CloudClassroom-PHP-Project. The impacted element is an unknown function of the file manageassessment2.php. This manipulation of the argument ExamName/Q1/Q2/Q3/Q4/Q5 causes cross site scripting. The attack is possible to be carried out remotely. The exploit has been published and may be used. This product adopts a rolling release strategy to maintain continuous delivery. Therefore, version details for affected or updated releases cannot be specified. The vendor was contacted early about this disclosure but did not respond in any way.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Capivara Research/manageassessment2-stored-xssllm-create
Mathurvishal/CloudClassroom-PHP-Projectllm-fuzzy

Patches

Vulnerability mechanics

References

github.com/capivara-research/manageassessment2-stored-xss/blob/main/manageassessment2-stored-xss.mdnvd
vuldb.com/cve/CVE-2026-120343nvd
vuldb.com/submit/1017562nvd
vuldb.com/vuln/429668nvd
vuldb.com/vuln/429668/ctinvd

News mentions

No linked articles in our index yet.

cvss	0.280
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000