CVE-2026-4575

1.9 lowEPSS 0.2%

Low (1.9). EPSS 0.2% chance of exploitation in the next 30 days.

A flaw has been found in code-projects Exam Form Submission 1.0. This issue affects some unknown processing of the file /admin/update_s2.php. This manipulation of the argument sname causes cross site scripting. The attack can be initiated remotely. The exploit has been published and may be used.

Severity

CVSS 4.0

1.9 low

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P

CVSS 3.1

2.4 low

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 11% of CVEs (scores of 2026-10-31)
CWEs: CWE-79, CWE-94
Published: 2026-03-23
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

References

https://code-projects.org/
https://github.com/yao536/cve/issues/1
https://vuldb.com/?ctiid.352412
https://vuldb.com/?id.352412
https://vuldb.com/?submit.775202

Check your stack JSON