CVE-2026-90845

A flaw has been found in PHPGurukul Daily Expense Tracker System 1.1. This issue affects some unknown processing of the file /dets/includes/sidebar.php. Executing a manipulation of the argument FullName can lead to cross site scripting. The attack can be executed remotely. The exploit has been published and may be used.

  • Published Sep 15, 2026
  • CVSS 2.0 low
  • 0.3% chance of exploitation in the next 30 days (EPSS)

Affected software

CVE-2026-90845 at the National Vulnerability Database