CVE-2026-120339Medium· 4.3▾ TwilightPoC availableA security flaw has been discovered in mathurvishal CloudClassroom-PHP-Project. This vulnerability affects unknown code of the file updatedetailsfromfaculty.php. Performing a manipulation of the argument fname results in cross site scrip…
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 23.7 · likelihood 0.1 · exploitation 12
A public proof-of-concept already exists for this vulnerability — see Exploit availability below.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake. The CVSS score shown above comes from the assigning CNA record, not NVD.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
0.3%
A security flaw has been discovered in mathurvishal CloudClassroom-PHP-Project. This vulnerability affects unknown code of the file updatedetailsfromfaculty.php. Performing a manipulation of the argument fname results in cross site scripting. The attack may be initiated remotely. The exploit has been released to the public and may be used for attacks. This product uses a rolling release model to deliver continuous updates. As a result, specific version information for affected or updated releases is not available. The vendor was contacted early about this disclosure but did not respond in any way.
CloudClassroom-PHP-Project 5dadec098bfbbf3300d60c3494db3fb95b66e7beCloudClassroom-PHP-Project c46ce5736007d9d6e51a8feeb9250729fe85f139CloudClassroom-PHP-Project dae0c5961a35a4faf28cde9e02117538f09f81c1Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-120343Medium· 4.3mathurvishal CloudClassroom-PHP-Project manageassessment2.php cross site scripting
CVE-2026-116097Medium· 4.3CloudClassroom-PHP-Project addnewstudent.php cross site scripting
CVE-2026-100877Medium· 4.3A vulnerability was determined in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be
CVE-2026-100311Low· 3.5A vulnerability was identified in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be
CVE-2026-100313Medium· 4.3A weakness has been identified in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be
CVE-2026-120341High· 7.3mathurvishal CloudClassroom-PHP-Project studentdetails.php redirect