CVE-2026-5671 Cyber-III Student-Management-System Class Schedule Deletion Endpoint delete_batch.php cross site scripting

A vulnerability was determined in Cyber-III Student-Management-System up to 1a938fa61e9f735078e9b291d2e6215b4942af3f. Impacted is an unknown function of the file /admin/class%20schedule/deletebatch.php of the component Class Schedule Deletion Endpoint. Executing a manipulation of the argument bat...

Student-Management-System 代码注入漏洞

Student-Management-System is an open-source student information management system developed by Cyber-III. The Student-Management-System has a code injection vulnerability, which stems from incorrect handling of the "batch" parameter in the file admin/class%20schedule/deletebatch.php. This...