PT-2026-53115 · Undefined · Undefined

Published 2026-06-28 · Updated 2026-06-28 · CVE-2026-13504

NVD

CVSS v2.0

4.0

Medium

Base vector

AV:N/AC:L/Au:S/C:N/I:P/A:N

A vulnerability has been found in code-projects Project Management System 1.0. This vulnerability affects unknown code of the file /mail.php of the component Mail Compose Page. Such manipulation leads to cross site scripting. The attack may be performed from remote. The exploit has been disclosed to the public and may be used.

Exploit

Fix

XSS

Code Injection

Weakness Enumeration

CWE-79

CWE-94

Related Identifiers

CVE-2026-13504

Affected Products

Undefined

References · 7

• 🔥 https://github.com/MyMySSS/CVE123/blob/main/cve4/PMS_CVE_Submission.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-13504 · Security Note
• https://vuldb.com/vuln/374499/cti · Note
• https://vuldb.com/submit/838683 · Note
• https://vuldb.com/vuln/374499 · Note
• https://code-projects.org · Note
• https://vuldb.com/cve/CVE-2026-13504 · Note