CVE-2026-86294

MEDIUMCVSS 4.3

Description

A vulnerability has been found in SourceCodester Simple Traffic Offense System 1.0. Affected by this issue is some unknown functionality of the file save-settings.php of the component Settings Update Endpoint. The manipulation of the argument site_name/site_desc leads to cross site scripting. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used.

Timeline

Published:September 7th, 2026 11:17 AM

Last modified:September 8th, 2026 1:12 PM

CVSS Scoring

CVSS v3: 4.3 (MEDIUM)

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

CVSS v2: 5.0

Weaknesses (CWE)

CWE-79 CWE-94

References & Reports

Advisories, patches, and third-party reports

https://github.com/tan1540684326-QAQ/cve/issues/3
https://vuldb.com/cve/CVE-2026-86294
https://vuldb.com/submit/906279
https://vuldb.com/vuln/399456
https://vuldb.com/vuln/399456/cti
https://www.sourcecodester.com/

Source: NIST NVD · Data may lag official sources by up to one minute