PT-2026-27064 · Code Projects · Exam Form Submission

Rocky__Cheng · Published 2026-03-23 · Updated 2026-03-23 · CVE-2026-4578

Mitre

CVSS v3.1

2.4

Low

AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N

A vulnerability was determined in code-projects Exam Form Submission 1.0. The impacted element is an unknown function of the file /admin/update s3.php. Executing a manipulation of the argument sname can lead to cross site scripting. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized.

Exploit

Fix

Code Injection

XSS

Weakness Enumeration

CWE-94

CWE-79

Related Identifiers

CVE-2026-4578

Affected Products

Exam Form Submission

References · 6

• 🔥 https://github.com/rockycheng1/cve/issues/2 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-4578 · Security Note
• https://vuldb.com/?submit.775206 · Note
• https://code-projects.org · Note
• https://vuldb.com/?id.352415 · Note
• https://vuldb.com/?ctiid.352415 · Note