PT-2026-86637 · Sourcecodester · Syllabus-Aligned Learning Management/Examination System

·

CVE-2026-86278

·

Published

2026-09-07

·

Updated

2026-09-07

CVSS v3.1

4.3

Medium

VectorAV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
A vulnerability was found in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. The affected element is an unknown function of the file manage subjects.php. The manipulation of the argument msg/title/content results in cross site scripting. The attack may be performed from remote. The exploit has been made public and could be used.

Exploit

Fix

XSS

Code Injection

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2026-86278

Affected Products

Syllabus-Aligned Learning Management/Examination System