CVE-2026-7401
MediumCVSS 4.3Exploitation Probability (EPSS)
Low risk25th percentile - higher than 25% of all known CVEs
Summary
In SourceCodester CET Automated Grading System with AI Predictive Analytics 1.0, the file /index.php?action=register (Registration component) is vulnerable to cross-site scripting via manipulation of the student_id/full_name/section/username arguments. The exploit is public and can be launched remotely.
Risk Assessment
An attacker could inject malicious script that executes in a user's browser, potentially leading to session theft or other attacks.
Recommendation
Implement input validation and sanitization in the registration form and consider updating the system if a fix is available.
Other vulnerabilities in SourceCodester CET Automated Grading System with AI Predictive Analytics
See all- CVE-2026-12529High
A vulnerability has been detected in the SourceCodester CET Automated Grading System with AI Predictive Analytics 1.0. It affects an unknown function of the file /index.php of the Student Self-Registration Endpoint, leading to improper access controls.
- CVE-2026-12176Medium
Vulnerability in SourceCodester CET Automated Grading System with AI Predictive Analytics 1.0. An unknown function in the file /index.php allows XSS attack via manipulation of the action argument. The attack can be carried out remotely.
Original NVD description (English source)
A vulnerability was detected in SourceCodester CET Automated Grading System with AI Predictive Analytics 1.0. This vulnerability affects unknown code of the file /index.php?action=register of the component Registration. The manipulation of the argument student_id/full_name/section/username results in cross site scripting. The attack can be launched remotely. The exploit is now public and may be used.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS