CVE-2026-90845

Description

A flaw has been found in PHPGurukul Daily Expense Tracker System 1.1. This issue affects some unknown processing of the file /dets/includes/sidebar.php. Executing a manipulation of the argument FullName can lead to cross site scripting. The attack can be executed remotely. The exploit has been published and may be used.

CVSS Vector

References

• https://github.com/usernamevnq/CVEs/issues/6
• https://phpgurukul.com/
• https://vuldb.com/cve/CVE-2026-90845
• https://vuldb.com/submit/925682
• https://vuldb.com/vuln/403397
• https://vuldb.com/vuln/403397/cti