Cross-Site Scripting Vulnerability in Code-Projects Assessment Management by Code-Projects
CVE-2026-93975

4.8MEDIUM

Key Information:

Vendor: Code-projects
Status: Assessment Management
Vendor: CVE Published:; 20 September 2026

🔔 Create Code-projects Vulnerability Alert

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2026-93975?

A cross-site scripting vulnerability has been identified in the Code-Projects Assessment Management application version 1.0, affecting the User Editing component. Specifically, the issue arises from the manipulation of parameters such as name, sname, email, username, password, and id within the admin/edit-user.php file. This security flaw could allow attackers to execute arbitrary scripts in the context of other users, posing significant risks to data integrity and user privacy. Remote exploitation is possible, making it imperative for organizations using this software to implement security patches and best practices to mitigate potential threats.

Affected Version(s)

Assessment Management 1.0

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2026-93975 - Proof of Concept