Is CVE-2026-90845 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-90845?

CVE-2026-90845 has a CVSS v3 severity of LOW (3.5).

Back

CVE-2026-90845

Description

A flaw has been found in PHPGurukul Daily Expense Tracker System 1.1. This issue affects some unknown processing of the file /dets/includes/sidebar.php. Executing a manipulation of the argument FullName can lead to cross site scripting. The attack can be executed remotely. The exploit has been published and may be used.