A vulnerability identified as problematic has been detected in code-projects Online Student Management System 1.0. The impacted element is an unknown function of the file /admin/announcement/index.php?view=add of the component Announcement Management Module. This manipulation causes cross site scripting.

This vulnerability is tracked as CVE-2026-2156. The attack is possible to be carried out remotely. Moreover, an exploit is present.