CVE-2026-11534

Name of the Vulnerable Software and Affected Versions imvks786 student management system versions prior to 9599b560ad3c3b83e75d328b76bedcd489ef1f46

Description A cross site scripting issue exists in the /add.php file. Remote attackers can trigger this by manipulating the name, address, or fname arguments. Cross site scripting is a technique where malicious scripts are injected into trusted websites.

Recommendations As a temporary workaround, restrict access to the /add.php file or avoid using the name, address, and fname parameters until a fix is released.