CVE-2026-4595 - code-projects Exam Form Submission update_s6.php cross site scripting

Back Back to CVE browser

MEDIUM

code-projects Exam Form Submission update_s6.php cross site scripting

Published Mar 23, 2026

4.8

MEDIUM

CVSS 4.0

EPSS 0.35%

Description

A vulnerability was determined in code-projects Exam Form Submission 1.0. This vulnerability affects unknown code of the file /admin/update_s6.php. Executing a manipulation of the argument sname can lead to cross site scripting. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized.

Affected products

Vendor Code-Projects Product Exam Form Submission Default
n/a
- Version
  1.0
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Code-Projects

Exam Form Submission

n/a

Version	Status	Constraints
1.0	affected	-

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-79

Cross-site Scripting (XSS)

CWE-94

Code Injection

References (6)

https://code-projects.org/
product
https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-14510
Advisory
https://github.com/bybinyu/Vulnerability-Practice/issues/1
exploitissue-tracking
https://vuldb.com/submit/775623
third-party-advisory
https://vuldb.com/vuln/352433
vdb-entrytechnical-description
https://vuldb.com/vuln/352433/cti
signaturepermissions-required

Link	Providers	Tags
https://code-projects.org/		product
https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-14510		Advisory
https://github.com/bybinyu/Vulnerability-Practice/issues/1		exploitissue-tracking
https://vuldb.com/submit/775623		third-party-advisory
https://vuldb.com/vuln/352433		vdb-entrytechnical-description
https://vuldb.com/vuln/352433/cti		signaturepermissions-required