Cross-Site Scripting Vulnerability in mathurvishal CloudClassroom-PHP-Project

CVE-2026-120339

What is CVE-2026-120339?

A security flaw has been identified in the mathurvishal CloudClassroom-PHP-Project, specifically in the updatedetailsfromfaculty.php file. The vulnerability allows an attacker to perform cross-site scripting (XSS) by manipulating the argument fname. This may enable remote exploitation, posing a risk to users of the application. The exploit has been publicly released, increasing the urgency for affected users to assess their risk and take necessary protective measures. Furthermore, as the product follows a rolling release model, continuous updates may obscure specific version details for this vulnerability. Notably, the vendor has not responded to initial disclosure attempts regarding this issue.

References