CVE-2026-100311

Name of the Vulnerable Software and Affected Versions CloudClassroom-PHP-Project versions up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be

Description A remote cross site scripting issue exists within the Faculty Video Management component in the managevideos2.php file. The flaw allows an attacker to execute malicious scripts by manipulating the V Title, V Url, or V Remarks arguments. Cross site scripting is a technique where malicious scripts are injected into trusted websites.

Recommendations As a temporary workaround, restrict access to the managevideos2.php file or avoid using the V Title, V Url, and V Remarks arguments until a fix is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.