CVE-2026-4356 MEDIUM

CVE-2026-4356: itsourcecode University Management System add_result.php cross site scripting

Vendor Itsourcecode

Product University Management System

Weakness CWE-79 · XSS

Published March 18, 2026

Last update March 18, 2026

View on NVD All CVEs

CVSS base score

4.8/10

Attack vector Network

Attack complexity Low

Privileges required High

User interaction —

Confidentiality —

Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P

What the vulnerability does

Description

A flaw has been found in itsourcecode University Management System 1.0. Affected is an unknown function of the file /add_result.php. Executing a manipulation of the argument vr can lead to cross site scripting. The attack may be launched remotely. The exploit has been published and may be used.

Key dates

Disclosure timeline

March 18, 2026 CVE published

March 18, 2026 Record updated