CVE-2026-14656: code-projects Assessment Management remove-user.php cross site scripting
Published Jul 4, 2026
·Updated
A security vulnerability has been detected in code-projects Assessment Management 1.0. This affects an unknown part of the file /admin/remove-user.php. The manipulation of the argument ID leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used.
Affected Software
1 affected component
Code-projects Assessment Management=1.0
Event History
Jul 4, 2026
CVE Published
via MITRE·09:30 PM
Data Sourced
via MITRE·09:30 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·10:16 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2026-14656?
CVE-2026-14656 has a medium severity rating of 4.3.
2
What type of vulnerability is CVE-2026-14656?
CVE-2026-14656 is a cross-site scripting (XSS) vulnerability.
3
How can CVE-2026-14656 be exploited?
CVE-2026-14656 can be exploited by manipulating the ID argument in the remove-user.php file.
4
What software is affected by CVE-2026-14656?
CVE-2026-14656 affects Code-projects Assessment Management version 1.0.
5
How do I fix CVE-2026-14656?
To fix CVE-2026-14656, ensure proper input validation and sanitization for user inputs in the remove-user.php script.