CVE-2026-2939

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2026-2939
A vulnerability was found in itsourcecode Student Management System 1.0. The impacted element is an unknown function of the file /add_student/ of the component Add Student Module. The manipulation results in cross site scripting. It is possible to launch the attack remotely. The exploit has been made public and could be used.

2.4 /10

CVSS v3 : LOW

V3 Legend

Vector :

Exploitability : 0.9 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required HIGH

User Interaction REQUIRED

Confidentiality Impact NONE

Integrity Impact LOW

Availability Impact NONE

Scope UNCHANGED

3.3 /10

CVSS v2.0 : LOW

V2 Legend

Vector : AV:N/AC:L/Au:M/C:N/I:P/A:N

Exploitability : 6.4 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication MULTIPLE

Confidentiality Impact NONE

Integrity Impact PARTIAL

Availability Impact NONE

References
Link Resource
https://drive.google.com/file/d/1a-qY55pgynQviBw9UxPoIDs-UNgz6zOH/view Exploit
https://github.com/AS-AbdulSamad/CVE-1/tree/main Exploit Third Party Advisory
https://itsourcecode.com/ Product
https://vuldb.com/?ctiid.347311 Permissions Required VDB Entry
https://vuldb.com/?id.347311 Third Party Advisory VDB Entry
https://vuldb.com/?submit.755977 Third Party Advisory VDB Entry
Configurations

Configuration 1 (hide)

cpe:2.3:a:itsourcecode:student_management_system:1.0:*:*:*:*:*:*:*
History

23 Feb 2026, 20:18

Type Values Removed Values Added
First Time Itsourcecode
Itsourcecode student Management System
References () https://drive.google.com/file/d/1a-qY55pgynQviBw9UxPoIDs-UNgz6zOH/view - () https://drive.google.com/file/d/1a-qY55pgynQviBw9UxPoIDs-UNgz6zOH/view - Exploit
References () https://github.com/AS-AbdulSamad/CVE-1/tree/main - () https://github.com/AS-AbdulSamad/CVE-1/tree/main - Exploit, Third Party Advisory
References () https://itsourcecode.com/ - () https://itsourcecode.com/ - Product
References () https://vuldb.com/?ctiid.347311 - () https://vuldb.com/?ctiid.347311 - Permissions Required, VDB Entry
References () https://vuldb.com/?id.347311 - () https://vuldb.com/?id.347311 - Third Party Advisory, VDB Entry
References () https://vuldb.com/?submit.755977 - () https://vuldb.com/?submit.755977 - Third Party Advisory, VDB Entry
CPE cpe:2.3:a:itsourcecode:student_management_system:1.0:*:*:*:*:*:*:*

23 Feb 2026, 18:13

Type Values Removed Values Added
Summary
  • (es) Se encontró una vulnerabilidad en itsourcecode Student Management System 1.0. El elemento afectado es una función desconocida del archivo /add_student/ del componente Add Student Module. La manipulación resulta en cross-site scripting. Es posible lanzar el ataque de forma remota. El exploit se ha hecho público y podría ser usado.

22 Feb 2026, 10:15

Type Values Removed Values Added
New CVE
Information

Published : 2026-02-22 10:15

Updated : 2026-02-23 20:18

NVD link : CVE-2026-2939

Mitre link : CVE-2026-2939

CVE.ORG link : CVE-2026-2939

JSON object : View

Products Affected

itsourcecode

  • student_management_system
CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CWE-94

Improper Control of Generation of Code ('Code Injection')