CVE-2026-4595

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2026-4595
A vulnerability was determined in code-projects Exam Form Submission 1.0. This vulnerability affects unknown code of the file /admin/update_s6.php. Executing a manipulation of the argument sname can lead to cross site scripting. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized.

2.4 /10

CVSS v3 : LOW

V3 Legend

Vector :

Exploitability : 0.9 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required HIGH

User Interaction REQUIRED

Confidentiality Impact NONE

Integrity Impact LOW

Availability Impact NONE

Scope UNCHANGED

3.3 /10

CVSS v2.0 : LOW

V2 Legend

Vector : AV:N/AC:L/Au:M/C:N/I:P/A:N

Exploitability : 6.4 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication MULTIPLE

Confidentiality Impact NONE

Integrity Impact PARTIAL

Availability Impact NONE

References
Link Resource
https://code-projects.org/
https://github.com/bybinyu/Vulnerability-Practice/issues/1
https://vuldb.com/submit/775623
https://vuldb.com/vuln/352433
https://vuldb.com/vuln/352433/cti
Configurations

No configuration.

History

18 Apr 2026, 05:16

Type Values Removed Values Added
Summary
  • (es) Se determinó una vulnerabilidad en code-projects Exam Form Submission 1.0. Esta vulnerabilidad afecta código desconocido del archivo /admin/update_s6.php. La ejecución de una manipulación del argumento sname puede llevar a cross site scripting. El ataque puede lanzarse remotamente. El exploit ha sido divulgado públicamente y puede utilizarse. Si desea obtener la mejor calidad para los datos de vulnerabilidad, entonces siempre debe considerar VulDB.
Summary (en) A vulnerability was determined in code-projects Exam Form Submission 1.0. This vulnerability affects unknown code of the file /admin/update_s6.php. Executing a manipulation of the argument sname can lead to cross site scripting. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized. If you want to get the best quality for vulnerability data then you always have to consider VulDB. (en) A vulnerability was determined in code-projects Exam Form Submission 1.0. This vulnerability affects unknown code of the file /admin/update_s6.php. Executing a manipulation of the argument sname can lead to cross site scripting. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized.
References
  • {'url': 'https://vuldb.com/?ctiid.352433', 'source': 'cna@vuldb.com'}
  • {'url': 'https://vuldb.com/?id.352433', 'source': 'cna@vuldb.com'}
  • {'url': 'https://vuldb.com/?submit.775623', 'source': 'cna@vuldb.com'}
  • () https://vuldb.com/submit/775623 -
  • () https://vuldb.com/vuln/352433 -
  • () https://vuldb.com/vuln/352433/cti -

23 Mar 2026, 19:16

Type Values Removed Values Added
New CVE
Information

Published : 2026-03-23 19:16

Updated : 2026-06-17 10:56

NVD link : CVE-2026-4595

Mitre link : CVE-2026-4595

CVE.ORG link : CVE-2026-4595

JSON object : View

Products Affected

No product.

CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CWE-94

Improper Control of Generation of Code ('Code Injection')