CVE-2023-2826

MediumCVSS 5.4/10Last modified Jun 17, 2026

Description

A vulnerability has been found in SourceCodester Class Scheduling System 1.0 and classified as problematic. This vulnerability affects unknown code of the file search_teacher_result.php of the component POST Parameter Handler. The manipulation of the argument teacher leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-229612.

Metrics

CVSS 3.1 5.4/10CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

No affected versions have been published.

Timeline

Published
May 21, 2023
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2023

CVE-2023-282607.8.NET DLL Hijacking Remote Code Execution VulnerabilityCVE-2023-282615.7Microsoft Edge (Chromium-based) Elevation of Privilege VulnerabilityCVE-2023-282627.8Visual Studio Elevation of Privilege VulnerabilityCVE-2023-282635.5Visual Studio Information Disclosure VulnerabilityCVE-2023-282665.5Windows Common Log File System Driver Information Disclosure VulnerabilityCVE-2023-282676.5Remote Desktop Protocol Client Information Disclosure VulnerabilityCVE-2023-282688.1Netlogon RPC Elevation of Privilege VulnerabilityCVE-2023-282696.8Windows Boot Manager Security Feature Bypass VulnerabilityCVE-2023-28275.7SAP Plant Connectivity - version 15.5 (PCo) or the Production Connector for SAP Digital Manufacturing - version 1.0, do not validate the sigCVE-2023-282706.8Windows Lock Screen Security Feature Bypass VulnerabilityCVE-2023-282715.5Windows Kernel Memory Information Disclosure VulnerabilityCVE-2023-282727.8Windows Kernel Elevation of Privilege Vulnerability
CVE-2023-2826: Medium severity, CVSS 5.4 | Vulnix