CVE-2026-4577: code-projects Exam Form Submission update_s4.php cross site scripting
A vulnerability was found in code-projects Exam Form Submission 1.0. The affected element is an unknown function of the file /admin/updates4.php. Performing a manipulation of the argument sname results in cross site scripting. The attack may be initiated remotely. The exploit has been made public and could be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-4577?
CVE-2026-4577 has been classified as a medium severity vulnerability due to its potential for cross site scripting attacks.
How do I fix CVE-2026-4577?
To fix CVE-2026-4577, you should sanitize and validate the input received through the sname parameter in the update_s4.php file.
What software is affected by CVE-2026-4577?
CVE-2026-4577 affects version 1.0 of the code-projects Exam Form Submission.
What type of vulnerability is CVE-2026-4577?
CVE-2026-4577 is a cross site scripting (XSS) vulnerability that allows attackers to inject malicious scripts into the application.
Is CVE-2026-4577 exploitable remotely?
Yes, CVE-2026-4577 is exploitable remotely since it involves user-supplied data in a web application.