CVE-2026-14656code-projects Assessment Management remove-user.php cross site scripting

Beschreibung

A security vulnerability has been detected in code-projects Assessment Management 1.0. This affects an unknown part of the file /admin/remove-user.php. The manipulation of the argument ID leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used.

Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.

Betroffene Produkte und Versionen

Referenzen und Patches

• VDB-376170 | code-projects Assessment Management remove-user.php cross site scripting vdb-entrytechnical-description
• VDB-376170 | CTI Indicators (IOB, IOC, TTP, IOA) signaturepermissions-required
• CVE-2026-14656 | CVE Analysis and Report third-party-advisory
• Submit #846715 | Assessment Management System admin/remove-user.php Reflected XSS Vulnerability v1.0 Reflected XSS third-party-advisory
• https://github.com/zzzxc643/CVE1/blob/main/assessment/vul4.md exploit
• https://code-projects.org/ product