Monitor vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
5.3
itsourcecode University Management System Cross-Site Scripting
CVE-2026-3412
Summary
A vulnerability in the itsourcecode University Management System could allow an attacker to inject malicious code into a website, potentially harming users. This is a serious issue because it can be exploited remotely. To protect your system, consider updating to a patched version or using a web application firewall.
What to do
No fix is available yet. Check with your software vendor for updates.
Affected software
| Vendor | Product | Affected versions | Fix available |
|---|---|---|---|
| angeljudesuarez | university_management_system | 1.0 | – |
Original title
A vulnerability was detected in itsourcecode University Management System 1.0. This affects an unknown part of the file /att_single_view.php. The manipulation of the argument dt results in cross si...
Original description
A vulnerability was detected in itsourcecode University Management System 1.0. This affects an unknown part of the file /att_single_view.php. The manipulation of the argument dt results in cross site scripting. The attack can be executed remotely. The exploit is now public and may be used.
nvd CVSS2.0
5.0
nvd CVSS3.1
6.1
nvd CVSS4.0
5.3
Vulnerability type
CWE-79
Cross-site Scripting (XSS)
CWE-94
Code Injection
- https://github.com/dyh1213-wq/cve/issues/1 Exploit Issue Tracking Mitigation Third Party Advisory
- https://itsourcecode.com/ Product
- https://vuldb.com/?ctiid.348307 Permissions Required VDB Entry
- https://vuldb.com/?id.348307 Third Party Advisory VDB Entry
- https://vuldb.com/?submit.763770 Third Party Advisory VDB Entry
Published: 2 Mar 2026 · Updated: 13 Mar 2026 · First seen: 6 Mar 2026