EIP-2026-110319

PRE-CVE

OpenSIS 8.0 - 'cp_id_miss_attn' Reflected Cross-Site Scripting (XSS)

Title source: legacy
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-110319. PoCs published by Eric Salario.

AI-analyzed exploit summary This exploit demonstrates a reflected XSS vulnerability in OpenSIS 8.0 via the 'cp_id_miss_attn' parameter in TakeAttendance.php. The PoC includes a crafted URL that triggers an alert popup when hovered over, confirming the vulnerability.

Description

OpenSIS 8.0 - 'cp_id_miss_attn' Reflected Cross-Site Scripting (XSS)

Exploits (1)

exploitdb WORKING POC
by Eric Salario · textwebappsphp
https://www.exploit-db.com/exploits/50352

This exploit demonstrates a reflected XSS vulnerability in OpenSIS 8.0 via the 'cp_id_miss_attn' parameter in TakeAttendance.php. The PoC includes a crafted URL that triggers an alert popup when hovered over, confirming the vulnerability.

Classification
Working Poc 100%
Attack Type
Xss
Complexity
Trivial
Reliability
Reliable
Target: OpenSIS Community Edition 8.0
Auth required
Prerequisites: Valid teacher credentials · Access to the TakeAttendance.php page
MITRE ATT&CK
devstral-2 · analyzed Feb 16, 2026 Full analysis →

Details

Status pre_cve
Tracked Since Feb 18, 2026