CVE-2026-100880

Name of the Vulnerable Software and Affected Versions zhistaredu StarTraining versions prior to 3.8.2

Description A weakness in the Upload Endpoint component, specifically within the file du-common/src/main/java/com/edu/common/utils/file/MimeTypeUtils.java, allows for remote cross-site scripting. This occurs through the manipulation of the File argument. Cross-site scripting is a technique where malicious scripts are injected into trusted websites.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.