PT-2026-35356 · Code Projects · Chat System

C4Ttr4Ck · Published 2026-04-27 · Updated 2026-04-27 · CVE-2026-7090

Mitre

CVSS v3.1

2.4

Low

AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N

A vulnerability was detected in code-projects Chat System 1.0. This affects an unknown function of the file /admin/send message.php of the component Chat Interface. The manipulation of the argument msg results in cross site scripting. The attack may be launched remotely. The exploit is now public and may be used.

Exploit

Fix

Code Injection

XSS

Weakness Enumeration

CWE-94

CWE-79

Related Identifiers

CVE-2026-7090

Affected Products

Chat System

References · 6

• 🔥 https://gist.github.com/higordiego/4683bee16b197643744159b76d0c1ea6 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-7090 · Security Note
• https://vuldb.com/submit/800383 · Note
• https://vuldb.com/vuln/359665/cti · Note
• https://vuldb.com/vuln/359665 · Note
• https://code-projects.org · Note