CVE-2026-7401 - Vulnerability Analysis

Overview

SourceCodester CET Automated Grading System with AI Predictive Analytics 1.0 contains a stored XSS caused by manipulation of student_id, full_name, section, or username parameters in /index.php?action=register, letting remote attackers execute scripts, exploit requires no special privileges.

Severity & Score

Impact

Remote attackers can execute arbitrary scripts in users' browsers, potentially stealing session data or performing actions on behalf of users.

Mitigation

Update to the latest version or apply patches that sanitize user inputs in the registration component.

References

• https://github.com/Xmyronn/Stored-XSS-in-CET-Automated-Grading-System-Student-Registration-Unauthenticated-Admin-Dashboard-.git
• https://vuldb.com/submit/803525
• https://vuldb.com/vuln/360133
• https://vuldb.com/vuln/360133/cti
• https://www.sourcecodester.com/

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner