CVE-2026-37750
Last modified
CVE-2026-37750 is a medium-severity vulnerability rated 6.1/10 on the CVSS scale. A reflected Cross-Site Scripting (XSS) vulnerability in School Management System by mahmoudai1 allows unauthenticated remote attackers to execute arbitrary JavaScript in victim's browsers via the unsanitized type parameter in register.php.. EPSS estimates a 0.37% chance of exploitation in the next 30 days.
Description
A reflected Cross-Site Scripting (XSS) vulnerability in School Management System by mahmoudai1 allows unauthenticated remote attackers to execute arbitrary JavaScript in victim's browsers via the unsanitized type parameter in register.php.
Metrics
Weakness Enumeration
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2026-37750?
How severe is CVE-2026-37750?
How do I fix CVE-2026-37750?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-37736An issue in the JsonSanitizer.sanitize() component of OWASP …7.5
- CVE-2026-37737sanic-cors version 2.2.0 and prior contains an improper regu…6.5
- CVE-2026-3774The application allows PDF JavaScript and document/print act…7.5
- CVE-2026-37748Visitor Management System 1.0 by sanjay1313 is vulnerable to…7.2
- CVE-2026-37749A SQL injection vulnerability in CodeAstro Simple Attendance…9.8
- CVE-2026-3775The application's update service, when checking for updates,…7.8
- CVE-2026-37751An OS command injection vulnerability in the killSessionSync…9.8
- CVE-2026-3776The application does not validate the presence of required a…5.5
- CVE-2026-3777The application does not properly validate the lifetime and …7.8
- CVE-2026-3778The application does not detect or guard against cyclic PDF …5.5
- CVE-2026-3779The application's list box calculate array logic keeps stale…7.8
- CVE-2026-3780The application's installer runs with elevated privileges bu…7.8
Are you affected by CVE-2026-37750?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST