CVE-2026-120341High· 7.3▾ MidnightPoC availableA security vulnerability has been detected in mathurvishal CloudClassroom-PHP-Project. Impacted is an unknown function of the file studentdetails.php. The manipulation leads to execution after redirect. Remote exploitation of the attack …
▾ Midnight zone — Critical, or high with PoC / in-the-wild
impact 40.2 · likelihood 0.1 · exploitation 12
A public proof-of-concept already exists for this vulnerability — see Exploit availability below.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake. The CVSS score shown above comes from the assigning CNA record, not NVD.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
Last analysed / modified upstream
0.5%
A security vulnerability has been detected in mathurvishal CloudClassroom-PHP-Project. Impacted is an unknown function of the file studentdetails.php. The manipulation leads to execution after redirect. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used. This product follows a rolling release approach for continuous delivery, so version details for affected or updated releases are not provided. The vendor was contacted early about this disclosure but did not respond in any way.
CloudClassroom-PHP-Project 5dadec098bfbbf3300d60c3494db3fb95b66e7beCloudClassroom-PHP-Project c46ce5736007d9d6e51a8feeb9250729fe85f139CloudClassroom-PHP-Project dae0c5961a35a4faf28cde9e02117538f09f81c1Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-120343Medium· 4.3mathurvishal CloudClassroom-PHP-Project manageassessment2.php cross site scripting
CVE-2026-120339Medium· 4.3mathurvishal CloudClassroom-PHP-Project updatedetailsfromfaculty.php cross site scripting
CVE-2026-116097Medium· 4.3CloudClassroom-PHP-Project addnewstudent.php cross site scripting
CVE-2026-100894Medium· 6.3A vulnerability was identified in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be
CVE-2026-100877Medium· 4.3A vulnerability was determined in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be
CVE-2026-100876Medium· 6.3A vulnerability was found in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be