CVE-2026-4973: SourceCodester Online Quiz System add-question.php cross site scripting
A vulnerability was detected in SourceCodester Online Quiz System up to 1.0. Affected by this vulnerability is an unknown functionality of the file endpoint/add-question.php. Performing a manipulation of the argument quizquestion results in cross site scripting. It is possible to initiate the attack remotely. The exploit is now public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-4973?
The severity of CVE-2026-4973 is classified as a medium risk due to the potential for cross-site scripting attacks.
How do I fix CVE-2026-4973?
To fix CVE-2026-4973, sanitize user inputs in the add-question.php file to prevent execution of malicious scripts.
What systems are affected by CVE-2026-4973?
CVE-2026-4973 affects the SourceCodester Online Quiz System version up to and including 1.0.
What kind of attacks can CVE-2026-4973 lead to?
CVE-2026-4973 can lead to cross-site scripting (XSS) attacks, allowing attackers to execute scripts in the context of user sessions.
Is there a public exploit for CVE-2026-4973?
While there may not be a public exploit for CVE-2026-4973, the vulnerability itself poses a significant security risk due to its nature.