Ghostwire
Home / Vulnerabilities / CVE-2026-37750

CVE-2026-37750: A reflected Cross-Site Scripting (XSS) vulnerability in School Management System by mahmoudai1 allows unauthenticated...

MEDIUM CVSS 5.5

Published: April 28, 2026 | Last Modified: April 28, 2026

Description

A reflected Cross-Site Scripting (XSS) vulnerability in School Management System by mahmoudai1 allows unauthenticated remote attackers to execute arbitrary JavaScript in victim's browsers via the unsanitized type parameter in register.php.

Ghostwire Analysis — What This Means Practically

This analysis is generated by Ghostwire from NVD, CISA KEV, EPSS, and open-source intelligence data. Verify findings through primary sources before acting.

Security Coverage (2 articles)

Tenable CVEs
CVE-2026-37750
 CVE Feed
CVE-2026-37750 - School Management System by mahmoudai1 Reflected Cross-Site Scripting (XSS)

References