CVE-2026-78054

Name of the Vulnerable Software and Affected Versions SourceCodester Class and Exam Timetabling System version 1.0

Description A weakness in the /BSIS1.php file allows for remote cross site scripting (XSS), a technique where malicious scripts are injected into trusted websites. This occurs through the manipulation of the course variable.

Recommendations As a temporary workaround, avoid using the course variable in the /BSIS1.php file until a fix is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.