PT-2026-27032 · Code Projects · Exam Form Submission

Sgwt · Published 2026-03-22 · Updated 2026-03-23 · CVE-2026-4557

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions code-projects Exam Form Submission version 1.0

Description A cross-site scripting issue exists in code-projects Exam Form Submission version 1.0. The issue is located in the file /admin/update s1.php. Manipulation of the sname argument can trigger the issue. The attack can be initiated remotely. The exploit is publicly available.

Recommendations Apply any available updates to address the issue in the /admin/update s1.php file. As a temporary workaround, sanitize the sname argument to prevent cross-site scripting. Restrict access to the /admin/update s1.php file to authorized personnel only.

Exploit

Fix

XSS

Code Injection

Weakness Enumeration

CWE-79

CWE-94

Related Identifiers

CVE-2026-4557

Affected Products

Exam Form Submission

References · 8

• 🔥 https://github.com/dsdsadawada/CVE1/issues/3 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-4557 · Security Note
• https://twitter.com/cyberbivash/status/2035805150040719577 · Twitter Post
• https://code-projects.org · Note
• https://twitter.com/CVEnew/status/2035992496023466120 · Twitter Post
• https://vuldb.com/?ctiid.352384 · Note
• https://vuldb.com/?id.352384 · Note
• https://vuldb.com/?submit.774947 · Note