PT-2026-53115 · Undefined · Undefined

Publicado 2026-06-28 · Atualizado 2026-06-28 · CVE-2026-13504

NVD

CVSS v2.0

4.0

Média

Vetor base

AV:N/AC:L/Au:S/C:N/I:P/A:N

A vulnerability has been found in code-projects Project Management System 1.0. This vulnerability affects unknown code of the file /mail.php of the component Mail Compose Page. Such manipulation leads to cross site scripting. The attack may be performed from remote. The exploit has been disclosed to the public and may be used.

Exploit

Correção

XSS

Code Injection

Enumeração de Fraquezas

CWE-79

CWE-94

Identificadores relacionados

CVE-2026-13504

Produtos afetados

Undefined

Referências · 7

• 🔥 https://github.com/MyMySSS/CVE123/blob/main/cve4/PMS_CVE_Submission.md · Exploit
• https://vuldb.com/vuln/374499/cti · Nota
• https://vuldb.com/submit/838683 · Nota
• https://vuldb.com/vuln/374499 · Nota
• https://code-projects.org · Nota
• https://vuldb.com/cve/CVE-2026-13504 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-13504 · Nota de Segurança