CVE-2026-2943

The CVE concerns SapneshNaik Student Management System (up to f4b4f0928f0b5551a28ee81ae7e7fe47d9345318). A vulnerability in an unknown function of index.php allows manipulating the Error argument to trigger cross‑site scripting. It is exploitable remotely and exploits are publicly available. The ...