{"id":"CVE-2026-12176","state":"PUBLISHED","title":"SourceCodester CET Automated Grading System with AI Predictive Analytics index.php cross site scripting","description":"A vulnerability has been found in SourceCodester CET Automated Grading System with AI Predictive Analytics 1.0. The impacted element is an unknown function of the file /index.php. The manipulation of the argument action leads to cross site scripting. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be used.","publishedAt":"2026-06-13T23:15:10.784Z","updatedAt":"2026-06-15T21:47:13.434Z","severity":{"score":5.3,"label":"Medium","version":"4.0","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P","source":"VulDB"},"assigner":"VulDB","products":["SourceCodester CET Automated Grading System with AI Predictive Analytics"],"affected":[{"vendor":"SourceCodester","product":"CET Automated Grading System with AI Predictive Analytics","versions":[{"version":"1.0","status":"affected"}],"cpes":["cpe:2.3:a:sourcecodester:cet_automated_grading_system_with_ai_predictive_analytics:*:*:*:*:*:*:*:*"]}],"references":["https://vuldb.com/vuln/370818","https://vuldb.com/vuln/370818/cti","https://vuldb.com/cve/CVE-2026-12176","https://vuldb.com/submit/837732","https://www.sourcecodester.com/"],"weaknesses":["CWE-79","CWE-94"],"ingestedAt":"2026-10-29T20:10:52.580Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2026/12xxx/CVE-2026-12176.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-12176","state":"PUBLISHED","datePublished":"2026-06-13T23:15:10.784Z","dateUpdated":"2026-06-15T21:47:13.434Z","assignerShortName":"VulDB","assignerOrgId":"1af790b2-7ee1-4545-860a-a788eba489b5","dateReserved":"2026-06-13T05:55:32.673Z"},"containers":{"cna":{"title":"SourceCodester CET Automated Grading System with AI Predictive Analytics index.php cross site scripting","descriptions":[{"lang":"en","value":"A vulnerability has been found in SourceCodester CET Automated Grading System with AI Predictive Analytics 1.0. The impacted element is an unknown function of the file /index.php. The manipulation of the argument action leads to cross site scripting. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be used."}],"affected":[{"vendor":"SourceCodester","product":"CET Automated Grading System with AI Predictive Analytics","versions":[{"version":"1.0","status":"affected"}],"cpes":["cpe:2.3:a:sourcecodester:cet_automated_grading_system_with_ai_predictive_analytics:*:*:*:*:*:*:*:*"]}],"references":[{"url":"https://vuldb.com/vuln/370818","name":"VDB-370818 | SourceCodester CET Automated Grading System with AI Predictive Analytics index.php cross site scripting","tags":["vdb-entry","technical-description"]},{"url":"https://vuldb.com/vuln/370818/cti","name":"VDB-370818 | CTI Indicators (IOB, IOC, TTP, IOA)","tags":["signature","permissions-required"]},{"url":"https://vuldb.com/cve/CVE-2026-12176","name":"CVE-2026-12176 | CVE Analysis and Report","tags":["third-party-advisory"]},{"url":"https://vuldb.com/submit/837732","name":"Submit #837732 | https://www.sourcecodester.com/ CET Automated Grading System with AI Predictive Analytics in PHP and MySQL Version: 1.0 Cross Site Scripting - Reflected XSS","tags":["third-party-advisory"]},{"url":"https://www.sourcecodester.com/","tags":["product"]}],"metrics":[{"cvssV4_0":{"version":"4.0","baseScore":5.3,"vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P","baseSeverity":"MEDIUM"}},{"cvssV3_1":{"version":"3.1","baseScore":4.3,"vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:X/RC:R","baseSeverity":"MEDIUM"}},{"cvssV3_0":{"version":"3.0","baseScore":4.3,"vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:X/RC:R","baseSeverity":"MEDIUM"}},{"cvssV2_0":{"version":"2.0","baseScore":5,"vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N/E:POC/RL:ND/RC:UR"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-79","type":"CWE","lang":"en","description":"Cross Site Scripting"}]},{"descriptions":[{"cweId":"CWE-94","type":"CWE","lang":"en","description":"Code Injection"}]}],"providerMetadata":{"shortName":"VulDB","orgId":"1af790b2-7ee1-4545-860a-a788eba489b5","dateUpdated":"2026-06-13T23:15:10.784Z"},"timeline":[{"time":"2026-06-13T00:00:00.000Z","lang":"en","value":"Advisory disclosed"},{"time":"2026-06-13T02:00:00.000Z","lang":"en","value":"VulDB entry created"},{"time":"2026-06-13T08:00:36.000Z","lang":"en","value":"VulDB entry last update"}],"credits":[{"lang":"en","value":"Abhay mp (VulDB User)","type":"reporter"},{"lang":"en","value":"VulDB Vulnerability Moderation Team","type":"coordinator"}],"tags":["x_freeware"]},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2026-06-15T21:46:20.308785Z","id":"CVE-2026-12176","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-06-15T21:47:13.434Z"}}]}}}