CVE-2026-4991 — QDOCS Smart School Management System Admission Enquiry enquiry cross site scripting

CVE-2026-4991

QDOCS Smart School Management System Admission Enquiry enquiry cross site scripting PUBLISHED

Description (CNA)

A vulnerability was detected in QDOCS Smart School Management System up to 7.2. The impacted element is an unknown function of the file /admin/enquiry of the component Admission Enquiry Module. Performing a manipulation of the argument Note results in cross site scripting. The attack is possible to be carried out remotely.

Affected (CNA)

Vendor / product	Versions
QDOCS / Smart School Management System	affected 7.0; affected 7.1; affected 7.2

CWE

CWE-79, CWE-94

References

https://vuldb.com/?id.353878
https://vuldb.com/?ctiid.353878
https://vuldb.com/?submit.776300

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.