CVE-2026-6003 - code-projects Simple IT Discussion Forum user.php cross site scripting

Back Back to CVE browser

MEDIUM

code-projects Simple IT Discussion Forum user.php cross site scripting

Published Apr 10, 2026

4.8

MEDIUM

CVSS 4.0

EPSS 0.35%

Description

A security vulnerability has been detected in code-projects Simple IT Discussion Forum 1.0. This issue affects some unknown processing of the file /admin/user.php. Such manipulation of the argument fname leads to cross site scripting. The attack may be performed from remote. The exploit has been disclosed publicly and may be used.

Affected products

Vendor Code-Projects Product Simple IT Discussion Forum Default
n/a
- Version
  1.0
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Code-Projects

Simple IT Discussion Forum

n/a

Version	Status	Constraints
1.0	affected	-

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-79

Cross-site Scripting (XSS)

CWE-94

Code Injection

References (6)

https://code-projects.org/
product
https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-21284
Advisory
https://github.com/zulu225588/zulu-loudong/issues/2
exploitissue-tracking
https://vuldb.com/submit/794332
third-party-advisory
https://vuldb.com/vuln/356559
vdb-entrytechnical-description
https://vuldb.com/vuln/356559/cti
signaturepermissions-required

Link	Providers	Tags
https://code-projects.org/		product
https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-21284		Advisory
https://github.com/zulu225588/zulu-loudong/issues/2		exploitissue-tracking
https://vuldb.com/submit/794332		third-party-advisory
https://vuldb.com/vuln/356559		vdb-entrytechnical-description
https://vuldb.com/vuln/356559/cti		signaturepermissions-required