CVE-2026-86226

2.0 lowEPSS 0.3%

Low (2.0). EPSS 0.3% chance of exploitation in the next 30 days.

A security flaw has been discovered in Projectwolds Online Attendance System 1.0. Affected by this issue is some unknown functionality of the file profile.php. The manipulation of the argument email results in cross site scripting. The attack may be performed from remote. The exploit has been released to the public and may be used for attacks.

Severity

CVSS 4.0

2.0 low

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P

CVSS 3.1

3.5 low

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 26% of CVEs (scores of 2026-10-31)
CWEs: CWE-79, CWE-94
Published: 2026-09-06
Modified: 2026-09-08
Record from: the NVD, synced 2026-10-19

References

https://github.com/CyberShailendra1/Online-Attendance-System-Projectworlds
https://vuldb.com/cve/CVE-2026-86226
https://vuldb.com/submit/898328
https://vuldb.com/vuln/399379
https://vuldb.com/vuln/399379/cti

Check your stack JSON