UNKNOWN NVD

CVE-2026-75460

XueZhiSi Open Source Exam System <= 3.9.0 has a privilege escalation vulnerability in the teacher-end interface POST /api/teacher/user/page/list. The role param

XueZhiSi Open Source Exam System <= 3.9.0 has a privilege escalation vulnerability in the teacher-end interface POST /api/teacher/user/page/list. The role parameter in UserPageRequestVM is fully controllable by the requester.

References

https://github.com/mindskip/xzs/compare/master...1258129581:xzs:patch-1

Published: 2026-08-31 · Source: NVD · Feed updated: 2026-08-31

This unknown severity vulnerability was published on 2026-08-31 via NVD.

vulnfeed aggregates 11540 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.