CVE-2026-93977: code-projects Assessment Management add-single-mark.php cross site scripting
Published Sep 20, 2026
·Updated
A vulnerability was determined in code-projects Assessment Management 1.0. Affected by this vulnerability is an unknown functionality of the file lecturer/add-single-mark.php. This manipulation of the argument mark causes cross site scripting. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized.
Affected Software
1 affected component
Assessment Management=1.0
Event History
Sep 20, 2026
CVE Published
via MITRE·10:15 AM
Data Sourced
via MITRE·10:15 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What level of access does an attacker need to exploit this issue?
The listed vector requires low privileges and user interaction. Exploitation is remote and targets the mark argument in lecturer/add-single-mark.php.
2
What is the likely security impact if exploitation succeeds?
The vulnerability can allow cross-site scripting, with integrity impact rated low. The provided vector indicates no confidentiality or availability impact.
3
Is public exploit information available?
Yes. The exploit has been publicly disclosed and may be used.