CVE-2026-1421

A vulnerability has been found in code-projects Online Examination System 1.0. Affected is an unknown function of the component Add Pages. Such manipulation leads to cross site scripting. The attack can be executed remotely. The exploit has been disclosed to the public and may be used.
Configurations

Configuration 1 (hide)

cpe:2.3:a:fabian:online_examination_system:1.0:*:*:*:*:*:*:*

History

28 Jan 2026, 14:24

Type Values Removed Values Added
CPE cpe:2.3:a:fabian:online_examination_system:1.0:*:*:*:*:*:*:*
References () https://code-projects.org/ - () https://code-projects.org/ - Product
References () https://github.com/geo-chen/code-projects/blob/main/Online%20Examination%20System%20In%20PHP%20With%20Source%20Code.md#finding-1-stored-xss-in-all-add-pages - () https://github.com/geo-chen/code-projects/blob/main/Online%20Examination%20System%20In%20PHP%20With%20Source%20Code.md#finding-1-stored-xss-in-all-add-pages - Exploit, Third Party Advisory
References () https://vuldb.com/?ctiid.342837 - () https://vuldb.com/?ctiid.342837 - Permissions Required, VDB Entry
References () https://vuldb.com/?id.342837 - () https://vuldb.com/?id.342837 - Third Party Advisory, VDB Entry
References () https://vuldb.com/?submit.736605 - () https://vuldb.com/?submit.736605 - Third Party Advisory, VDB Entry
First Time Fabian online Examination System
Fabian

26 Jan 2026, 06:16

Type Values Removed Values Added
New CVE

Information

Published : 2026-01-26 06:16

Updated : 2026-01-28 14:24


NVD link : CVE-2026-1421

Mitre link : CVE-2026-1421

CVE.ORG link : CVE-2026-1421


JSON object : View

Products Affected

fabian

  • online_examination_system
CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CWE-94

Improper Control of Generation of Code ('Code Injection')