CVE-2026-100877

Name of the Vulnerable Software and Affected Versions mathurvishal CloudClassroom-PHP-Project versions up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be

Description A remote cross site scripting issue exists in the registrationform.php file. This occurs when the FName, LName, or Addrs arguments are manipulated, allowing an attacker to execute malicious scripts in the victim's browser.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. Avoid using the FName, LName, and Addrs parameters in the registrationform.php file to minimize the risk of exploitation.