CVE-2026-16202

SourceCodester Class and Exam Timetabling System 1.0 is affected by a cross-site scripting vulnerability in the /CYS.php file, triggered by manipulating the course parameter. The issue allows remote exploitation and has publicly disclosed exploits according to the linked reports. The precise vuln...

forma.lms cross-site scripting vulnerability

forma.lms is an open-source, web-based online learning platform developed by individual developers. Version 2.3.0.2 of forma.lms contains a cross-site scripting vulnerability. This vulnerability arises from improper cleaning of inputs for course code, name, description fields, and email parameter...