Cross-Site Request Forgery in CloudClassroom-PHP-Project by mathurvishal

CVE-2026-100873

What is CVE-2026-100873?

A cross-site request forgery vulnerability has been identified in CloudClassroom-PHP-Project by mathurvishal. This vulnerability arises due to an unknown function that allows attackers to perform unauthorized actions on behalf of users without their consent. As this vulnerability can be exploited remotely, it poses a significant risk to users, as the exploit code is already public. The lack of versioning for this product makes it difficult to ascertain the full scope of affected releases, and despite efforts to inform the vendor about this issue, there has been no response.

References