CVE-2026-5106

LOW

Published:Mar 30, 2026(Today)

Modified:Mar 30, 2026

Vulnerability Description

A flaw has been found in code-projects Exam Form Submission 1.0. The impacted element is an unknown function of the file /admin/update_fst.php. Executing a manipulation of the argument sname can lead to cross site scripting. It is possible to launch the attack remotely. The exploit has been published and may be used.

Attack Characteristics

Network AccessLow ComplexityHigh PrivilegesUser Interaction Required

🤖

AI analysis not yet available

Plain-English explanation, risk summary, and remediation steps will appear here once AI analysis is complete.

References

https://code-projects.org/
https://github.com/sxc2044-pixel/hajimi/issues/1
https://vuldb.com/submit/780091
https://vuldb.com/vuln/354131

CVSS Score

v3.1

2.4/ 10.0

LOW

AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N

At a Glance

Affected Products

References

CVSS v3 Vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N

CVE-2026-5106

✦ Vulnerability Description

Attack Characteristics

References

CVSS Score

At a Glance

CVSS v3 Vector

Impact Analysis

Vulnerability Description