Back to overview

CVE-2026-15492

MEDIUM
4.3
CVSS 3.1
Description
A security vulnerability has been detected in igweze wizgrade up to b1d55f22b90cd7e7a6e5002f006d7c649e8086d6. This vulnerability affects unknown code of the file dashboard/studentConductManager.php. Such manipulation leads to cross site scripting. The attack may be performed from remote. The exploit has been disclosed publicly and may be used. This product utilizes a rolling release system for continuous delivery, and as such, version information for affected or updated releases is not disclosed. The vendor was contacted early about this disclosure but did not respond in any way.

Metadata

CVE ID
CVE-2026-15492
State
PUBLISHED
Assigner
VulDB
Reserved
2026-07-11 12:01 UTC
Published
2026-07-12 10:00 UTC
Last updated
2026-07-12 10:00 UTC
Primary CWE
CWE-79
Cross Site Scripting
Vendor / Product
igweze / wizgrade
Sources
cve.org  ·  NVD

Severity & Metrics

4.3 MEDIUM CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:X/RC:R
Affected products (1)
VendorProductPlatformVersions
igweze wizgrade — b1d55f22b90cd7e7a6e5002f006d7c649e8086d6
Weakness (CWE)
CWESourceDescription
CWE-79 cna Cross Site Scripting
CWE-94 cna Code Injection
CVSS scores (4)
ScoreSeverityVersionSourceVector
5.3 MEDIUM 4.0 cna CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P
5.0 N/D 2.0 cna AV:N/AC:L/Au:N/C:N/I:P/A:N/E:POC/RL:ND/RC:UR
4.3 MEDIUM 3.1 cna CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:X/RC:R
4.3 MEDIUM 3.0 cna CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:X/RC:R
References (5)
Back to overview