CloudClassroom-PHP-Project CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

MEDIUM CloudClassroom-PHP-Project CVE published 2026-10-25

CVE-2026-116097

A security vulnerability has been detected in CloudClassroom-PHP-Project, specifically in the addnewstudent.php file, which is susceptible to cross-site scripting (XSS). The vulnerability is triggered by manipulating the 'fname' argument. This issue allows for remote attacks. The exploit has been publicly disclosed and may be used. The product operates on a rolling release basis, meaning there are no spec [truncated]