Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A vulnerability was found in tittuvarghese CollegeManagementSystem 3e476335cfbfb9a049e09f474c7ec885f69a9df3/a38852979f7e27ae67b610dce5979500ef8ebe01. Affected by this vulnerability is an unknown functionality of the file /dashboard_page/forms/fetch.php. The manipulation of the argument department_name results in cross site scripting. The attack may be launched remotely. The exploit has been made public and could be used. This product operates on a rolling release basis, ensuring continuous delivery. Consequently, there are no version details for either affected or updated releases. The project was informed of the problem early through an issue report but has not responded yet.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2026-11337 Cross Site Scripting in tittuvarghese CollegeManagementSystem fetch.php Department Name Parameter https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-11337
Post summary
The post announces a CVE-2026-11337 XSS vulnerability in a college management system’s fetch.php Department Name parameter, without providing PoC, exploit details, or mitigation information.