VulnerabilityAnalyzed
CVE-2026-1421
A vulnerability has been found in code-projects Online Examination System 1.0.
LOW 2.0EPSS 0.27%
Does this matter?
Lower severity and a low EPSS score (0.27%). Track it; it rarely justifies an emergency change on its own.
Description
A vulnerability has been found in code-projects Online Examination System 1.0. Affected is an unknown function of the component Add Pages. Such manipulation leads to cross site scripting. The attack can be executed remotely. The exploit has been disclosed to the public and may be used.
- CVSS 4.0
- 2.0 LOWCVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/M
- EPSS
- 0.27% probability · 19th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-79, CWE-94
- Affected
- fabian/online examination system
- Source
- cna@vuldb.com
References
- https://code-projects.org/Product
- https://github.com/geo-chen/code-projects/blob/main/Online%20Examination%20System%20In%20PHP%20With%20Source%20Code.md#finding-1-stored-xss-in-all-add-pagesExploit, Third Party Advisory
- https://vuldb.com/?ctiid.342837Permissions Required, VDB Entry
- https://vuldb.com/?id.342837Third Party Advisory, VDB Entry
- https://vuldb.com/?submit.736605Third Party Advisory, VDB Entry
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.