CVE-2026-16485: SourceCodester Class and Exam Timetabling System class.php cross site scripting
Published Jul 21, 2026
·Updated
A vulnerability has been found in SourceCodester Class and Exam Timetabling System 1.0. Affected by this issue is some unknown functionality of the file /class.php. Such manipulation of the argument day leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Affected Software
1 affected component
Sourcecodester Class and Exam Timetabling System=1.0
Event History
Jul 21, 2026
CVE Published
via MITRE·10:00 PM
Data Sourced
via MITRE·10:00 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·11:17 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2026-16485?
The severity of CVE-2026-16485 is medium with a score of 4.3.
2
What type of vulnerability is CVE-2026-16485?
CVE-2026-16485 is a cross site scripting (XSS) vulnerability.
3
How can CVE-2026-16485 be exploited?
CVE-2026-16485 can be exploited remotely by manipulating the 'day' argument in the /class.php file.
4
How do I fix CVE-2026-16485?
To fix CVE-2026-16485, sanitize and validate user input in the affected functionality to prevent code injection.
5
What software is affected by CVE-2026-16485?
CVE-2026-16485 affects SourceCodester Class and Exam Timetabling System version 1.0.