Medium severity6.1NVD Advisory· Published Apr 28, 2026· Updated Apr 29, 2026

CVE-2026-37750

Description

A reflected Cross-Site Scripting (XSS) vulnerability in School Management System by mahmoudai1 allows unauthenticated remote attackers to execute arbitrary JavaScript in victim's browsers via the unsanitized type parameter in register.php.

Affected products

Menevarad007/Cve 2026 37750references

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

github.com/mahmoudai1/school-management-system/blob/main/register.phpnvd

News mentions

No linked articles in our index yet.

cvss	0.397
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000