CVE-2026-4578 in Exam Form Submissioninfo

Summary

by MITRE • 03/23/2026

A vulnerability was determined in code-projects Exam Form Submission 1.0. The impacted element is an unknown function of the file /admin/update_s3.php. Executing a manipulation of the argument sname can lead to cross site scripting. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Responsible

VulDB

Disclosure

03/23/2026

Moderation

accepted

CPE

ready

Exploit

Download

EPSS

0.00041

KEV

no

Activities

very low

Sources

Do you know our Splunk app?

Download it now for free!