CVE-2026-16486: SourceCodester Class and Exam Timetabling System BSIS.php cross site scripting
Published Jul 21, 2026
·Updated
A vulnerability was found in SourceCodester Class and Exam Timetabling System 1.0. This affects an unknown part of the file /BSIS.php. Performing a manipulation of the argument day results in cross site scripting. The attack may be initiated remotely. The exploit has been made public and could be used.
Affected Software
1 affected component
Sourcecodester Class and Exam Timetabling System=1.0
Event History
Jul 21, 2026
CVE Published
via MITRE·10:45 PM
Data Sourced
via MITRE·10:45 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·11:17 PM
DescriptionSeverityWeakness
Dec 29, 58528
Event
via NVD·05:52 PM
Frequently Asked Questions
1
What is the severity of CVE-2026-16486?
The severity of CVE-2026-16486 is rated as medium with a score of 4.3.
2
What type of vulnerability is CVE-2026-16486?
CVE-2026-16486 is a cross-site scripting (XSS) vulnerability.
3
How does CVE-2026-16486 impact the SourceCodester Class and Exam Timetabling System?
CVE-2026-16486 allows attackers to perform cross-site scripting attacks by manipulating the 'day' argument in the BSIS.php file.
4
Can CVE-2026-16486 be exploited remotely?
Yes, CVE-2026-16486 can be exploited remotely by an attacker.
5
How can I mitigate the risk associated with CVE-2026-16486?
To mitigate CVE-2026-16486, ensure you validate and sanitize user inputs to prevent cross-site scripting.