CVE-2026-93977
LOWCVSS 3.5Description
A vulnerability was determined in code-projects Assessment Management 1.0. Affected by this vulnerability is an unknown functionality of the file lecturer/add-single-mark.php. This manipulation of the argument mark causes cross site scripting. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized.
Timeline
Published:September 20th, 2026 11:16 AM
Last modified:September 24th, 2026 12:17 PM
CVSS Scoring
CVSS v3: 3.5 (LOW)
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
CVSS v2: 4.0
References & Reports
Advisories, patches, and third-party reports
Source: NIST NVD · Data may lag official sources by up to one minute