---
id: CVE-2026-78054
title: >-
  A weakness has been identified in SourceCodester Class and Exam Timetabling
  System 1.0
summary: >-
  A weakness has been identified in SourceCodester Class and Exam Timetabling
  System 1.0. Affected is an unknown function of the file /BSIS1.php. Executing
  a manipulation of the argument course can lead to cross site scripting. The
  attack …
severity: medium
cvss: 4.3
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N'
cwe:
  - CWE-79
  - CWE-94
published: '2026-08-23'
updated: '2026-10-12'
sourceUpdated: '2026-10-12T16:10:00.220'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-78054'
references:
  - url: 'https://github.com/i-QvQ-i/first-OvO/issues/10'
    label: cna@vuldb.com
  - url: 'https://vuldb.com/cve/CVE-2026-78054'
    label: cna@vuldb.com
  - url: 'https://vuldb.com/submit/881417'
    label: cna@vuldb.com
  - url: 'https://vuldb.com/vuln/394295'
    label: cna@vuldb.com
  - url: 'https://vuldb.com/vuln/394295/cti'
    label: cna@vuldb.com
  - url: 'https://www.sourcecodester.com/'
    label: cna@vuldb.com
  - url: 'https://github.com/i-QvQ-i/first-OvO/issues/10'
    label: 134c704f-9b21-4f2e-91b3-4a467353bcc0
tags:
  - nvd
epss: 0.0047
epssPercentile: 0.38864
ingestedAt: '2026-10-12T16:57:59.888Z'
---

## Overview

A weakness has been identified in SourceCodester Class and Exam Timetabling System 1.0. Affected is an unknown function of the file /BSIS1.php. Executing a manipulation of the argument course can lead to cross site scripting. The attack may be launched remotely. The exploit has been made available to the public and could be used for attacks.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.