Unknown · Cloudclassroom-Php Project · CVE-2026-100311
**Name of the Vulnerable Software and Affected Versions**
CloudClassroom-PHP-Project versions up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be
**Description**
A remote cross site scripting issue exists within the Faculty Video Management component in the `managevideos2.php` file. The flaw allows an attacker to execute malicious scripts by manipulating the `V Title`, `V Url`, or `V Remarks` arguments. Cross site scripting is a technique where malicious scripts are injected into trusted websites.
**Recommendations**
As a temporary workaround, restrict access to the `managevideos2.php` file or avoid using the `V Title`, `V Url`, and `V Remarks` arguments until a fix is available.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.