Code-Projects For Plugin vulnerabilities

CVE-2026-7503 [HIGH] CWE-119 CVE-2026-7503: A vulnerability was detected in code-projects for Plugin 4.1.2cu.5137. The impacted element is the f A vulnerability was detected in code-projects for Plugin 4.1.2cu.5137. The impacted element is the function setWiFiMultipleConfig in the library /lib/cste_modules/wireless.so of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument wepkey2 results in buffer overflow. The attack can be launched remotely. The exploit is now public and may be use

CVE-2026-2214 [MEDIUM] CWE-79 CVE-2026-2214: A weakness has been identified in code-projects for Plugin 1.0. This affects an unknown part of the A weakness has been identified in code-projects for Plugin 1.0. This affects an unknown part of the file /Administrator/PHP/AdminAddAlbum.php. This manipulation of the argument txtalbum causes cross site scripting. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be used for attacks.