Medium severity6.1NVD Advisory· Published Apr 28, 2026· Updated Apr 29, 2026

CVE-2026-37750

Description

A reflected Cross-Site Scripting (XSS) vulnerability in School Management System by mahmoudai1 allows unauthenticated remote attackers to execute arbitrary JavaScript in victim's browsers via the unsanitized type parameter in register.php.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Manikandan580/School Management Systemllm-fuzzy

Patches

Vulnerability mechanics

References

github.com/mahmoudai1/school-management-system/blob/main/register.phpnvd

News mentions

No linked articles in our index yet.

cvss	0.397
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000