PoC Index

CVE-2026-37750

MEDIUM 6.1EPSS 0.4%

A reflected Cross-Site Scripting (XSS) vulnerability in School Management System by mahmoudai1 allows unauthenticated remote attackers to execute arbitrary JavaScript in victim's browsers via the unsanitized type parameter in register.php.

CVSS v3.1
6.1 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS
0.37% chance of exploitation in the next 30 days, 30th percentile
Published
2026-04-28
Updated
2026-04-29

Proof-of-concept exploits (1)

References

Related