CVE-2026-4557: code-projects Exam Form Submission update_s1.php cross site scripting
A vulnerability was detected in code-projects Exam Form Submission 1.0. This impacts an unknown function of the file /admin/updates1.php. Performing a manipulation of the argument sname results in cross site scripting. The attack may be initiated remotely. The exploit is now public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-4557?
CVE-2026-4557 has a moderate severity level due to its potential for cross-site scripting attacks.
How do I fix CVE-2026-4557?
To fix CVE-2026-4557, sanitize all user inputs for the sname parameter in the update_s1.php file to prevent cross-site scripting.
What software is affected by CVE-2026-4557?
CVE-2026-4557 affects Code-projects Exam Form Submission version 1.0.
What kind of vulnerability is CVE-2026-4557?
CVE-2026-4557 is a cross-site scripting (XSS) vulnerability that allows attackers to inject malicious scripts.
Where is the vulnerable code in CVE-2026-4557 located?
The vulnerable code for CVE-2026-4557 is located in the /admin/update_s1.php file.