CVE-2026-2939

MEDIO 4.8CVE-2026-2939 · Published 22/02/2026 · updated 17/06/2026

En resumen

CVE-2026-2939 es una vulnerabilidad MEDIO (CVSS 4.8) que afecta a student management system (itsourcecode).
Probabilidad de explotación en los próximos 30 días (EPSS): 0.27%, mayor que el 19.8% de las vulnerabilidades.
Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.

Package	Affected versions	Patched versions
student management system itsourcecode	`= 1.0`	No fix yet

Description

A vulnerability was found in itsourcecode Student Management System 1.0. The impacted element is an unknown function of the file /add_student/ of the component Add Student Module. The manipulation results in cross site scripting. It is possible to launch the attack remotely. The exploit has been made public and could be used.

References

drive.google.com/file/d/1a-qY55pgynQviBw9UxPoIDs-UNgz6zOH/view · Exploit
AS-AbdulSamad/CVE-1 · Exploit
itsourcecode.com · Product
vuldb.com · Permissions Required
vuldb.com · Third Party Advisory
vuldb.com · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free