CVE-2026-10228

A vulnerability was found in raisulislamg4 student_management_system_by_php up to 310d950e09013d5133c6b9210aff9444382d16d1. The impacted element is an unknown function of the file admission_form_check.php. The manipulation of the argument Message results in cross site scripting. The attack can be executed remotely. The exploit has been made public and could be used. This product implements a rolling release for ongoing delivery, which means version information for affected or updated releases is unavailable. The project was informed of the problem early through an issue report but has not responded yet.

• CWE-79
• CWE-94

• https://github.com/raisulislamg4/student_management_system_by_php/
• https://github.com/raisulislamg4/student_management_system_by_php/issues/5
• https://vuldb.com/cve/CVE-2026-10228
• https://vuldb.com/submit/822848
• https://vuldb.com/vuln/367507
• https://vuldb.com/vuln/367507/cti

Published

Jun 1, 2026

Last Modified

Jul 22, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-102274PyJWT is a Python implementation of JSON Web Token standards…7.5
• CVE-2026-102275PyJWT is a Python implementation of JSON Web Token standards…8.2
• CVE-2026-102276The brace-expansion library generates arbitrary strings cont…7.5
• CVE-2026-102277The brace-expansion library generates arbitrary strings cont…5.3
• CVE-2026-102278The brace-expansion library generates arbitrary strings cont…7.5
• CVE-2026-102279Laravel is a web application framework. Prior to 12.69.0 and…3.1
• CVE-2026-102280Sandboxie-Plus is an open source sandbox-based isolation sof…6.9
• CVE-2026-102281Nest is a framework for building scalable Node.js server-sid…7.5
• CVE-2026-102282adm-zip is a JavaScript library for creating and extracting …7.1
• CVE-2026-102289zizmor is a static analysis tool for CI/CD systems. In versi…7
• CVE-2026-10229A vulnerability was determined in Assimp up to 6.0.4. This a…5.3
• CVE-2026-102290A vulnerability was determined in CodeCanyon Rocket LMS up t…3.5