Unrated severityNVD Advisory· Published Oct 19, 2026

CVE-2026-38671

Description

Cross Site Scripting vulnerability in Ellucian Banner Student Registration Self-Service (StudentRegistrationSsb) 9.23 and prior (no fixed version available) allows a remote attacker to execute arbitrary code via the mepCode parameter of the /ssb/registration endpoint

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Ellucian/Banner Student Registration Self-Servicellm-create
Range: <=9.23
Ellucian/StudentRegistrationSsbllm-create
Range: <=9.23
Ellucian/Bannerllm-fuzzy
Range: <=9.23

Patches

Vulnerability mechanics

References

banner.comnvd
ellucian.comnvd
gist.github.com/xAR191/7831b15a1a9b15f3fdbf6786a5b74c5envd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000