Cross-Site Scripting Vulnerability in code-projects Assessment Management
CVE-2026-93976

4.8MEDIUM

Key Information:

Vendor: Code-projects
Status: Assessment Management
Vendor: CVE Published:; 20 September 2026

🔔 Create Code-projects Vulnerability Alert

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2026-93976?

A cross-site scripting vulnerability has been identified in the code-projects Assessment Management application, specifically in the admin/add-user.php file. The vulnerability arises from improper handling of the 'level' parameter, allowing attackers to execute malicious scripts in the context of authenticated users. This vulnerability is particularly concerning as it can be exploited remotely, enabling unauthorized actions through manipulated user inputs. Publicly available exploits further heighten the risk, necessitating immediate attention from users and administrators to mitigate potential security breaches.

Affected Version(s)

Assessment Management 1.0

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2026-93976 - Proof of Concept