CVE-2026-93977
3.5 LOWpublic exploit availablePublished 2026-09-20 · Updated 2026-09-21
AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.
NVD description
A vulnerability was determined in code-projects Assessment Management 1.0. Affected by this vulnerability is an unknown functionality of the file lecturer/add-single-mark.php. This manipulation of the argument mark causes cross site scripting. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
Weaknesses
CWE-79, CWE-94
Public exploit & PoC references
All references
Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.
Related CVEs
- LOWCVE-2026-93956PoC
- LOWCVE-2026-93975PoC
- LOWCVE-2026-93976PoC
- LOWCVE-2026-94016PoC
- LOWCVE-2026-94033PoC
- LOWCVE-2026-94034PoC
- MEDIUMCVE-2026-94035PoC
- LOWCVE-2026-94045PoC
Related by shared AI tags and CWE weakness class. Browse the full archive.