CVE-2026-1421: code-projects Online Examination System Add Pages cross site scripting

Published Jan 26, 2026

Updated

A vulnerability has been found in code-projects Online Examination System 1.0. Affected is an unknown function of the component Add Pages. Such manipulation leads to cross site scripting. The attack can be executed remotely. The exploit has been disclosed to the public and may be used.

Affected Software

2 affected components

Code-projects Online Examination System

Fabian Online Examination System=1.0

Event History

Jan 26, 2026

CVE Published

via MITRE·05:32 AM

Data Sourced

via MITRE·05:32 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·06:16 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2026-1421?

CVE-2026-1421 is classified as a cross-site scripting (XSS) vulnerability with potential moderate severity due to its exploitation remotely.

How do I fix CVE-2026-1421?

To fix CVE-2026-1421, validate and sanitize all user inputs in the Add Pages functionality to prevent the execution of malicious scripts.

Who is affected by CVE-2026-1421?

CVE-2026-1421 affects users of the code-projects Online Examination System version 1.0.

What component is involved in CVE-2026-1421?

The component involved in CVE-2026-1421 is the Add Pages function of the code-projects Online Examination System.

Can CVE-2026-1421 be exploited remotely?

Yes, CVE-2026-1421 can be exploited remotely by attackers to execute malicious scripts on affected systems.