CVE-2026-90845

2.0 lowEPSS 0.3%

Low (2.0). EPSS 0.3% chance of exploitation in the next 30 days.

A flaw has been found in PHPGurukul Daily Expense Tracker System 1.1. This issue affects some unknown processing of the file /dets/includes/sidebar.php. Executing a manipulation of the argument FullName can lead to cross site scripting. The attack can be executed remotely. The exploit has been published and may be used.

Severity

CVSS 4.0

2.0 low

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P

CVSS 3.1

3.5 low

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 28% of CVEs (scores of 2026-10-31)
CWEs: CWE-79, CWE-94
Published: 2026-09-15
Modified: 2026-09-15
Record from: the NVD, synced 2026-10-19

References

https://github.com/usernamevnq/CVEs/issues/6
https://phpgurukul.com/
https://vuldb.com/cve/CVE-2026-90845
https://vuldb.com/submit/925682
https://vuldb.com/vuln/403397

Check your stack JSON