A reflected Cross-Site Scripting (XSS) vulnerability in School Management System by mahmoudai1 allows unauthenticated remote attackers to execute arbitrary JavaScript in victim's browsers via the uns…

中危 CVSS 6.1

CVECVE-2026-37750

首次发现2026-07-20 20:30 UTC

披露时间2026-04-28 22:16 UTC

最后更新2026-07-20 20:30 UTC

通道状态auto

摘要

A reflected Cross-Site Scripting (XSS) vulnerability in School Management System by mahmoudai1 allows unauthenticated remote attackers to execute arbitrary JavaScript in victim's browsers via the unsanitized type parameter in register.php.

中文摘要建设中，暂以英文摘要呈现（DR-003 v2）。

深度研判 · 自动通道

该漏洞尚未生成深度研判报告（DR-003 v2 AI pipeline 建设中）。

数据来源

NVD DATABASE

原始链接

https://github.com/mahmoudai1/school-management-system
https://github.com/mahmoudai1/school-management-system/blob/main/register.php
https://github.com/menevarad007/CVE-2026-37750
https://github.com/menevarad007/CVE-2026-37750

时间线

2026-07-20 nvd_ingest NVD