CVE-2026-3983

2.0 lowEPSS 0.2%

A security flaw has been discovered in Campcodes Division Regional Athletic Meet Game Result Matrix System 2.1. This affects an unknown part of the file save-games.php. The manipulation of the argument game_name results in cross site scripting. The attack may be performed from remote. The exploit has been released to the public and may be used for attacks.

Severity

CVSS 4.0

2.0 low

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P

CVSS 3.1

3.5 low

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 10% of CVEs (scores of 2026-10-31)
CWEs: CWE-79, CWE-94
Published: 2026-03-12
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

References

https://github.com/LaneyYu/cve/issues/10
https://vuldb.com/?ctiid.350419
https://vuldb.com/?id.350419
https://vuldb.com/?submit.769720
https://www.campcodes.com/

Check your stack JSON