CVE-2026-5106: code-projects Exam Form Submission update_fst.php cross site scripting
A flaw has been found in code-projects Exam Form Submission 1.0. The impacted element is an unknown function of the file /admin/updatefst.php. Executing a manipulation of the argument sname can lead to cross site scripting. It is possible to launch the attack remotely. The exploit has been published and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-5106?
CVE-2026-5106 has been categorized as a medium severity vulnerability due to its potential for cross site scripting (XSS) attacks.
How do I fix CVE-2026-5106?
To mitigate CVE-2026-5106, sanitize and validate user inputs to prevent XSS attacks in the /admin/update_fst.php file.
What impact does CVE-2026-5106 have on users?
CVE-2026-5106 can allow an attacker to execute arbitrary scripts in the context of a user's browser, potentially stealing cookies or session information.
Which versions of Code-projects Exam Form Submission are affected by CVE-2026-5106?
CVE-2026-5106 affects version 1.0 of Code-projects Exam Form Submission.
Is CVE-2026-5106 easy to exploit?
Exploiting CVE-2026-5106 is relatively simple for attackers familiar with XSS vulnerabilities, making it a significant security risk.