CVE-2026-14655: code-projects Assessment Management view-users.php cross site scripting
A weakness has been identified in code-projects Assessment Management 1.0. Affected by this issue is some unknown functionality of the file admin/view-users.php. Executing a manipulation of the argument User can lead to cross site scripting. The attack may be performed from remote. The exploit has been made available to the public and could be used for attacks.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-14655?
The severity of CVE-2026-14655 is classified as low with a score of 2.4.
How do I fix CVE-2026-14655?
To fix CVE-2026-14655, ensure to sanitize and validate user input in the view-users.php file to prevent cross site scripting attacks.
What type of vulnerability is CVE-2026-14655?
CVE-2026-14655 is a cross site scripting (XSS) vulnerability affecting Code-projects Assessment Management.
Can CVE-2026-14655 be exploited remotely?
Yes, CVE-2026-14655 can be exploited remotely through manipulation of user input.
Which file is affected by CVE-2026-14655?
CVE-2026-14655 affects the admin/view-users.php file in Code-projects Assessment Management.