PT-2026-53263 · Code Projects · Online Music Site

Qwcc · Publicado 2026-06-29 · Atualizado 2026-06-29 · CVE-2026-13567

NVD

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:N

A security flaw has been discovered in code-projects Online Music Site 1.0. This affects an unknown part of the file /Frontend/Feedback.php of the component POST Request Handler. The manipulation of the argument fname/femail/faddress/fmessage results in cross site scripting. The attack may be launched remotely. The exploit has been released to the public and may be used for attacks.

Exploit

Correção

Code Injection

XSS

Enumeração de Fraquezas

CWE-94

CWE-79

Identificadores relacionados

CVE-2026-13567

Produtos afetados

Online Music Site

Referências · 7

• 🔥 https://github.com/qwessec/CVE/issues/1 · Exploit
• https://vuldb.com/vuln/374575/cti · Nota
• https://vuldb.com/cve/CVE-2026-13567 · Nota
• https://vuldb.com/vuln/374575 · Nota
• https://vuldb.com/submit/844228 · Nota
• https://code-projects.org · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-13567 · Nota de Segurança