CVE-2026-4973 - SourceCodester Online Quiz System add-question.php cross site scripting

Back Back to CVE browser

MEDIUM

SourceCodester Online Quiz System add-question.php cross site scripting

Published Mar 27, 2026

5.1

MEDIUM

CVSS 4.0

EPSS 0.33%

Description

A vulnerability was detected in SourceCodester Online Quiz System up to 1.0. Affected by this vulnerability is an unknown functionality of the file endpoint/add-question.php. Performing a manipulation of the argument quiz_question results in cross site scripting. It is possible to initiate the attack remotely. The exploit is now public and may be used.

Affected products

Vendor SourceCodester Product Online Quiz System Default
n/a
- Version
  1.0
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

SourceCodester

Online Quiz System

n/a

Version	Status	Constraints
1.0	affected	-

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-79

Cross-site Scripting (XSS)

CWE-94

Code Injection

References (6)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-16807
Advisory
https://gist.github.com/Mohdanass/5992b65cca5612c036f1d31d8d8f0646
exploit
https://vuldb.com/?ctiid.353860
signaturepermissions-required
https://vuldb.com/?id.353860
vdb-entrytechnical-description
https://vuldb.com/?submit.778101
third-party-advisory
https://www.sourcecodester.com/
product

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-16807		Advisory
https://gist.github.com/Mohdanass/5992b65cca5612c036f1d31d8d8f0646		exploit
https://vuldb.com/?ctiid.353860		signaturepermissions-required
https://vuldb.com/?id.353860		vdb-entrytechnical-description
https://vuldb.com/?submit.778101		third-party-advisory
https://www.sourcecodester.com/		product