Vulnerabilities

TI-2026-03187 CVE-2026-3695 · GHSA-8hfg-9c72-535r

SourceCodester Modern Image Gallery App delete.php path traversal

HIGH 70

A vulnerability has been found in SourceCodester Modern Image Gallery App 1.0.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00873 Published 2026-03-08 No fix listed CWE-22

TI-2026-02852 CVE-2026-3302 · GHSA-3j9h-rxgh-gc62

SourceCodester Doctor Appointment System Sign Up register.php cross site scripting

MEDIUM 57

A weakness has been identified in SourceCodester Doctor Appointment System 1.0.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00407 Published 2026-02-27 No fix listed CWE-79

TI-2026-02730 CVE-2026-3163 · GHSA-4jxf-pwgr-9m4j

SourceCodester Website Link Extractor URL file_get_contents server-side request forgery

MEDIUM 57

A vulnerability has been found in SourceCodester Website Link Extractor 1.0.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00319 Published 2026-02-25 No fix listed CWE-918

TI-2026-02654 CVE-2026-3070 · GHSA-cxmx-5wwh-7p77

SourceCodester Modern Image Gallery App upload.php cross site scripting

MEDIUM 57

A vulnerability was detected in SourceCodester Modern Image Gallery App 1.0.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00315 Published 2026-02-24 No fix listed CWE-79

TI-2025-43112 CVE-2025-70458

A DOM-based Cross-Site Scripting (XSS) vulnerability exists in the DomainCheckerApp class…

MEDIUM 58

A DOM-based Cross-Site Scripting (XSS) vulnerability exists in the DomainCheckerApp class within domain/script.js of Sourcecodester Domain Availability Checker v1.0.

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.00233 Published 2026-01-23 No fix listed CWE-79

TI-2025-43111 CVE-2025-70457

A Remote Code Execution (RCE) vulnerability exists in Sourcecodester Modern Image Gallery…

HIGH 82

A Remote Code Execution (RCE) vulnerability exists in Sourcecodester Modern Image Gallery App v1.0 within the gallery/upload.php component.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00905 Published 2026-01-23 No fix listed CWE-434

TI-2026-00381 CVE-2026-0580 · GHSA-f86p-h224-6gv4

SourceCodester API Key Manager App Import Key cross site scripting

LOW 23

A vulnerability was found in SourceCodester API Key Manager App 1.0.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00226 Published 2026-01-05 No fix listed CWE-79

TI-2025-13273 CVE-2025-14530 · GHSA-4894-6mr3-x6vj

SourceCodester Real Estate Property Listing App property.php unrestricted upload

MEDIUM 56

A vulnerability has been found in SourceCodester Real Estate Property Listing App 1.0.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.00456 Published 2025-12-11 No fix listed CWE-284

TI-2025-39532 CVE-2025-64070 · GHSA-j57c-m578-5g7g

Sourcecodester Student Grades Management System v1.0 is vulnerable to Cross Site…

MEDIUM 58

Sourcecodester Student Grades Management System v1.0 is vulnerable to Cross Site Scripting (XSS) in the Add New Subject Description field.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00216 Published 2025-12-02 No fix listed CWE-79

TI-2025-12203 CVE-2025-13349 · GHSA-fqc4-p67w-grjw

SourceCodester Student Grades Management System Add New Grade grades.php cross site scripting

MEDIUM 56

A vulnerability has been found in SourceCodester Student Grades Management System 1.0.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00278 Published 2025-11-18 No fix listed CWE-79

TI-2025-39480 CVE-2025-63892 · GHSA-jgfp-3f5q-x7m9

A vulnerability was determined in SourceCodester Student Grades Management System 1.0.

LOW 32

A vulnerability was determined in SourceCodester Student Grades Management System 1.0.

CVSS 3.1MEDIUM 6.8 Network High privileges User interaction EPSS 0.00386 Published 2025-11-18 No fix listed CWE-79

TI-2025-39429 CVE-2025-63708 · GHSA-9chh-cmwc-p8fx

Cross-Site Scripting (XSS) vulnerability exists in SourceCodester AI Font Matcher…

MEDIUM 60

Cross-Site Scripting (XSS) vulnerability exists in SourceCodester AI Font Matcher (nid=18425, 2025-10-10) that allows remote attackers to execute arbitrary JavaScript in victims' browsers.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00292 Published 2025-11-17 No fix listed CWE-79

TI-2025-39435 CVE-2025-63714 · GHSA-w24c-cvfw-wmxx

Cross-Site Scripting (XSS) vulnerability in SourceCodester User Account Generator 1.0…

LOW 27

Cross-Site Scripting (XSS) vulnerability in SourceCodester User Account Generator 1.0 allows remote attackers to execute arbitrary JavaScript code in the context of the user's browser session via crafted input in the Use…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00284 Published 2025-11-07 No fix listed CWE-79

TI-2025-39434 CVE-2025-63713 · GHSA-ggfg-472r-q46h

Cross-Site Scripting (XSS) vulnerability in SourceCodester "MatchMaster" 1.0 allows…

MEDIUM 60

Cross-Site Scripting (XSS) vulnerability in SourceCodester "MatchMaster" 1.0 allows remote attackers to inject arbitrary web script or HTML via crafted input in the custom test creation feature.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00355 Published 2025-11-07 No fix listed CWE-79

TI-2025-39388 CVE-2025-63639 · GHSA-ghg3-c9m4-3hc2

The chat feature in the application Sourcecodester FAQ Bot with AI Assistant v1.0 is…

MEDIUM 60

The chat feature in the application Sourcecodester FAQ Bot with AI Assistant v1.0 is vulnerable to Cross-Site Scripting (XSS) due to improper handling of user-supplied input.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00241 Published 2025-11-07 No fix listed CWE-79

TI-2025-39387 CVE-2025-63638 · GHSA-vx5j-462j-vrmg

Sourcecodester AI-Powered To-Do List App v1.0 is vulnerable to Cross-Site Scripting (XSS)…

MEDIUM 60

Sourcecodester AI-Powered To-Do List App v1.0 is vulnerable to Cross-Site Scripting (XSS) in the "Task Title" and "Description (Optional)" fields when creating a Task, allowing an attacker to inject arbitrary potentially…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00241 Published 2025-11-07 No fix listed CWE-79

TI-2025-11310 CVE-2025-12332 · GHSA-c2g6-6cr7-6gxc

SourceCodester Student Grades Management System admin.php delete_user cross site scripting

MEDIUM 55

A flaw has been found in SourceCodester Student Grades Management System 1.0.

CVSS 4.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.00382 Published 2025-10-27 No fix listed CWE-79

TI-2025-10521 CVE-2025-11485 · GHSA-vrxx-w38g-v3f3

SourceCodester Student Grades Management System Manage Users admin.php add_user cross site scripting

MEDIUM 55

A vulnerability was determined in SourceCodester Student Grades Management System 1.0.

CVSS 4.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.00295 Published 2025-10-08 No fix listed CWE-79

TI-2025-19273 CVE-2025-26258 · GHSA-h889-572v-9cfg

Sourcecodester Employee Management System v1.0 is vulnerable to Cross Site Scripting (XSS) via 'Add Designation.'

MEDIUM 60

Sourcecodester Employee Management System v1.0 is vulnerable to Cross Site Scripting (XSS) via 'Add Designation.'

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00202 Published 2025-09-26 No fix listed CWE-79

TI-2025-35448 CVE-2025-57117 · GHSA-f8wp-g7q2-59gh

A Clickjacking vulnerability exists in Rems' Employee Management System 1.0.

MEDIUM 58

A Clickjacking vulnerability exists in Rems' Employee Management System 1.0.

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.00345 Published 2025-09-15 No fix listed CWE-79

TI-2025-35533 CVE-2025-57425 · GHSA-x48p-m2p4-gh79

A Stored Cross-Site Scripting (XSS) vulnerability in SourceCodester FAQ Management System…

MEDIUM 60

A Stored Cross-Site Scripting (XSS) vulnerability in SourceCodester FAQ Management System 1.0 allows an authenticated attacker to inject malicious JavaScript into the 'question' and 'answer' fields via the update-faq.php…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00288 Published 2025-08-26 No fix listed CWE-79

TI-2025-05068 CVE-2025-5628 · GHSA-g433-v23v-rq82

SourceCodester Food Menu Manager Add Menu index.php cross site scripting

MEDIUM 56

A vulnerability, which was classified as problematic, has been found in SourceCodester Food Menu Manager 1.0.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00364 Published 2025-06-05 No fix listed CWE-79

TI-2025-21170 CVE-2025-29719 · GHSA-frqg-qr33-mvr2

SourceCodester (rems) Employee Management System 1.0 is vulnerable to Cross Site…

MEDIUM 60

SourceCodester (rems) Employee Management System 1.0 is vulnerable to Cross Site Scripting (XSS) in add_employee.php via the First Name and Address text fields.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00298 Published 2025-04-02 No fix listed CWE-79

TI-2025-01650 CVE-2025-1905 · GHSA-m3mf-5vcm-ffxv

SourceCodester Employee Management System employee.php cross site scripting

MEDIUM 56

A vulnerability, which was classified as problematic, was found in SourceCodester Employee Management System 1.0.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00347 Published 2025-03-04 No fix listed CWE-79

TI-2025-00991 CVE-2025-1166 · GHSA-m6cq-73g8-w4jh

SourceCodester Food Menu Manager update.php unrestricted upload

MEDIUM 57

A vulnerability has been found in SourceCodester Food Menu Manager 1.0 and classified as critical.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00528 Published 2025-02-11 No fix listed CWE-284

Vulnerabilities

Filters