CVE-2026-3982

2.1 lowEPSS 0.3%

Low (2.1). EPSS 0.3% chance of exploitation in the next 30 days.

A vulnerability was determined in itsourcecode University Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /view_result.php. Executing a manipulation of the argument vr can lead to cross site scripting. The attack can be executed remotely. The exploit has been publicly disclosed and may be utilized.

Severity

CVSS 4.0

2.1 low

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P

CVSS 3.1

4.3 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 20% of CVEs (scores of 2026-10-31)
CWEs: CWE-79, CWE-94
Published: 2026-03-12
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

References

https://github.com/PIPIzzz1/aaa/issues/1
https://itsourcecode.com/
https://vuldb.com/?ctiid.350417
https://vuldb.com/?id.350417
https://vuldb.com/?submit.769668

Check your stack JSON