PT-2026-27052 · Code Projects · Exam Form Submission

Yao23333 · Published 2026-03-23 · Updated 2026-03-24 · CVE-2026-4575

Positive Technologies (AI Summary)

CVSS v2.0

3.3

Low

Base vector

AV:N/AC:L/Au:M/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions code-projects Exam Form Submission version 1.0

Description A flaw exists in code-projects Exam Form Submission 1.0, involving the processing of the file '/admin/update s2.php'. Manipulation of the sname argument can lead to cross site scripting. This issue can be exploited remotely. The exploit has been published.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

XSS

Code Injection

Weakness Enumeration

CWE-79

CWE-94

Related Identifiers

CVE-2026-4575

Affected Products

Exam Form Submission

References · 8

• 🔥 https://github.com/yao536/cve/issues/1 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-4575 · Security Note
• https://twitter.com/CVEnew/status/2035992469922287947 · Twitter Post
• https://twitter.com/CVEarity/status/2036441885624115486 · Twitter Post
• https://vuldb.com/?ctiid.352412 · Note
• https://code-projects.org · Note
• https://vuldb.com/?submit.775202 · Note
• https://vuldb.com/?id.352412 · Note