Threats affecting pkg:github/pangdudu24/cve

CVE-2026-90526 is a SQL injection vulnerability in SourceCodester School Registration and Fee System version 1.0. It arises from improper handling of the 'Category' parameter in the /bilal/save_class.php file, allowing remote attackers to inject SQL commands. The vulnerability has a medium severity with a CVSS score of 6.9. Exploit code has been publicly disclosed, but no known active exploitation in the wild is reported. No official patch or remediation guidance is currently provided by the vendor.