CVE-2026-1421mediumCWE-79CWE-94

CVE-2026-1421: fallo de gravedad media en code-projects Online Examination System

code-projects Online Examination System Add Pages cross site scripting

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear Online Examination System

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

13Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 5.1epss 0.3%
A vulnerability has been found in code-projects Online Examination System 1.0. Affected is an unknown function of the component Add Pages. Such manipulation leads to cross site scripting. The attack can be executed remotely. The exploit has been disclosed to the public and may be used.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P
Productos afectados
code-projects · Online Examination System
CVEs relacionadas — code-projects Online Examination System

En el mismo producto, de las más peligrosas a las menos.

CVE-2026-1422MEDIUMcode-projects Online Examination System Login Page index.php sql injectionEPSS 0.5%CVE-2026-16220MEDIUMcode-projects Online Examination System account.php cross site scriptingEPSS 0.5%CVE-2026-1423MEDIUMcode-projects Online Examination System admin_pic.php unrestricted uploadEPSS 0.4%CVE-2026-2173MEDIUMcode-projects Online Examination System login.php sql injectionEPSS 0.4%