Signal is active with 4 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A security vulnerability has been detected in PHPGurukul Student Record Management System up to 1.0. This vulnerability affects unknown code of the file /edit-course.php. Such manipulation of the argument Course Short Name leads to cross site scripting. The attack can be executed remotely. The exploit has been disclosed publicly and may be used.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
CVE-2026-3402公開。 学生管理システムに認証不要XSS。 パッチ未提供のため公開直後の悪用リスク上昇。 https://radar.offseq.com/threat/cve-2026-3402-cross-site-scripting-in-phpgurukul-s-3b0afb5a
Post summary
CVE-2026-3402 is a newly disclosed unauthenticated XSS flaw in a student management system, with no patch available, increasing the risk of immediate exploitation.
🚨*CVE* CVE-2026-3402 A security vulnerability has been detected in PHPGurukul Student Record Management System up to 1.0. This vulnerability affects unknown code of the file /edit-course.ph… https://www.cve.org/CVERecord?id=CVE-2026-3402 ----- Traducción: CVE-2026-3402 Se … http://infoflow.cloud`
Post summary
A new CVE-2026-3402 vulnerability was reported in PHPGurukul Student Record Management System up to version 1.0, affecting an unknown code segment in /edit-course.ph, with no further details or mitigation provided.
CVE-2026-3402 A security vulnerability has been detected in PHPGurukul Student Record Management System up to 1.0. This vulnerability affects unknown code of the file /edit-course.ph… https://www.cve.org/CVERecord?id=CVE-2026-3402
Post summary
A vulnerability (CVE-2026-3402) was identified in PHPGurukul Student Record Management System affecting an unknown code segment in /edit-course.ph, with no further details on exploitation or mitigation.
CVE-2026-3402 Cross-Site Scripting in PHPGurukul Student Record Management System via Course Name https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-3402
Post summary
A new XSS vulnerability (CVE‑2026‑3402) was disclosed in the PHPGurukul Student Record Management System via the Course Name field.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | phpgurukul | student_record_system | 1.0 | - | - |