PT-2026-4724 · Unknown · Code-Projects Online Examination System

Geochen · Publicado 2026-01-26 · Atualizado 2026-01-28 · CVE-2026-1421

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Média

Vetor base

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions code-projects Online Examination System version 1.0

Description A flaw exists in the Add Pages component of the software, allowing for cross site scripting. This manipulation can be executed remotely. The exploit details have been publicly disclosed.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

XSS

Code Injection

Enumeração de Fraquezas

CWE-79

CWE-94

Identificadores relacionados

CVE-2026-1421

Produtos afetados

Code-Projects Online Examination System

Referências · 11

• 🔥 https://github.com/geo-chen/code-projects/blob/main/Online%20Examination%20System%20In%20PHP%20With%20Source%20Code.md#finding-1-stored-xss-in-all-add-pages · Exploit
• https://code-projects.org · Nota
• https://twitter.com/CVEnew/status/2015673751849840915 · Publicação no Twitter
• https://vuldb.com/?submit.736605 · Nota
• https://t.me/CVEtracker/42983 · Publicação no Telegram
• https://t.me/cveNotify/150134 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2026-1421 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2026-1421 · Nota de Segurança
• https://t.me/cveNotify/149829 · Publicação no Telegram
• https://vuldb.com/?ctiid.342837 · Nota
• https://vuldb.com/?id.342837 · Nota