CVE-2026-2156

LOW

Fabian Online Student Management System - Code Injection

Title source: rule

Description

A weakness has been identified in code-projects Online Student Management System 1.0. The impacted element is an unknown function of the file /admin/announcement/index.php?view=add of the component Announcement Management Module. This manipulation causes cross site scripting. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be used for attacks.

References (5)

Scores

CVSS v3 2.4
EPSS 0.0003
EPSS Percentile 6.7%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N

Classification

CWE
CWE-79 CWE-94
Status published

Affected Products (1)

fabian/online_student_management_system

Timeline

Published Feb 08, 2026
Tracked Since Feb 18, 2026