Description
A vulnerability has been found in code-projects Exam Form Submission 1.0. Impacted is an unknown function of the file /admin/update_s5.php. Such manipulation of the argument sname leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| code-projects | Exam Form Submission | 1.0 | — |
References
- VDB-352413 | code-projects Exam Form Submission update_s5.php cross site scripting vdb-entry technical-description
- VDB-352413 | CTI Indicators (IOB, IOC, TTP, IOA) signature permissions-required
- Submit #775204 | code-projects Exam Form Submission V1.0 cross site scripting third-party-advisory
- https://github.com/rockycheng1/cve/issues/4 exploit issue-tracking
- https://code-projects.org/ product