Code-Projects Exam Form Submission vulnerabilities

CVE-2026-5106 [MEDIUM] CWE-79 CVE-2026-5106: A flaw has been found in code-projects Exam Form Submission 1.0. The impacted element is an unknown A flaw has been found in code-projects Exam Form Submission 1.0. The impacted element is an unknown function of the file /admin/update_fst.php. Executing a manipulation of the argument sname can lead to cross site scripting. It is possible to launch the attack remotely. The exploit has been published and may be used.

CVE-2026-4557 [MEDIUM] CWE-79 CVE-2026-4557: A vulnerability was detected in code-projects Exam Form Submission 1.0. This impacts an unknown func A vulnerability was detected in code-projects Exam Form Submission 1.0. This impacts an unknown function of the file /admin/update_s1.php. Performing a manipulation of the argument sname results in cross site scripting. The attack may be initiated remotely. The exploit is now public and may be used.

CVE-2023-42308 [MEDIUM] CWE-79 CVE-2023-42308: Cross Site Scripting (XSS) vulnerability in Manage Fastrack Subjects in Code-Projects Exam Form Subm Cross Site Scripting (XSS) vulnerability in Manage Fastrack Subjects in Code-Projects Exam Form Submission 1.0 allows attackers to run arbitrary code via the "Subject Name" and "Subject Code" Section.

CVE-2023-42307 [MEDIUM] CWE-79 CVE-2023-42307: Cross Site Scripting (XSS) vulnerability in Code-Projects Exam Form Submission 1.0 allows attackers Cross Site Scripting (XSS) vulnerability in Code-Projects Exam Form Submission 1.0 allows attackers to run arbitrary code via "Subject Name" and "Subject Code" section.

CVE-2026-4909 [LOW] CWE-79 CVE-2026-4909: A weakness has been identified in code-projects Exam Form Submission 1.0. This impacts an unknown fu A weakness has been identified in code-projects Exam Form Submission 1.0. This impacts an unknown function of the file /admin/update_s7.php. This manipulation of the argument sname causes cross site scripting. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be used for attacks.

CVE-2026-4578 [LOW] CWE-79 CVE-2026-4578: A vulnerability was determined in code-projects Exam Form Submission 1.0. The impacted element is an A vulnerability was determined in code-projects Exam Form Submission 1.0. The impacted element is an unknown function of the file /admin/update_s3.php. Executing a manipulation of the argument sname can lead to cross site scripting. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized.

CVE-2026-4577 [LOW] CWE-79 CVE-2026-4577: A vulnerability was found in code-projects Exam Form Submission 1.0. The affected element is an unkn A vulnerability was found in code-projects Exam Form Submission 1.0. The affected element is an unknown function of the file /admin/update_s4.php. Performing a manipulation of the argument sname results in cross site scripting. The attack may be initiated remotely. The exploit has been made public and could be used.

CVE-2026-4576 [LOW] CWE-79 CVE-2026-4576: A vulnerability has been found in code-projects Exam Form Submission 1.0. Impacted is an unknown fun A vulnerability has been found in code-projects Exam Form Submission 1.0. Impacted is an unknown function of the file /admin/update_s5.php. Such manipulation of the argument sname leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

CVE-2026-4575 [LOW] CWE-79 CVE-2026-4575: A flaw has been found in code-projects Exam Form Submission 1.0. This issue affects some unknown pro A flaw has been found in code-projects Exam Form Submission 1.0. This issue affects some unknown processing of the file /admin/update_s2.php. This manipulation of the argument sname causes cross site scripting. The attack can be initiated remotely. The exploit has been published and may be used.

CVE-2026-4595 [LOW] CWE-79 CVE-2026-4595: A vulnerability was determined in code-projects Exam Form Submission 1.0. This vulnerability affects A vulnerability was determined in code-projects Exam Form Submission 1.0. This vulnerability affects unknown code of the file /admin/update_s6.php. Executing a manipulation of the argument sname can lead to cross site scripting. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized.