CVE-2026-14655— code-projects Assessment Management view-users.php cross site scripting
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-14655
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
code-projects Assessment Management view-users.php cross site scripting
Source: NVD (National Vulnerability Database)
Vulnerability Description
A weakness has been identified in code-projects Assessment Management 1.0. Affected by this issue is some unknown functionality of the file admin/view-users.php. Executing a manipulation of the argument User can lead to cross site scripting. The attack may be performed from remote. The exploit has been made available to the public and could be used for attacks.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N
Source: NVD (National Vulnerability Database)
Vulnerability Type
在Web页面生成时对输入的转义处理不恰当(跨站脚本)
Source: NVD (National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| code-projects | Assessment Management | 1.0 | cpe:2.3:a:code-projects:assessment_management:*:*:*:*:*:*:*:* |
II. Public POCs for CVE-2026-14655
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-14655
请登录查看更多情报信息。
News Coverage for CVE-2026-14655 (1)
Same Patch Batch · code-projects · 2026-07-04 · 7 CVEs total
| CVE-2026-14660 | 7.3 HIGH | code-projects Online Job Portal login.php sql injection |
| CVE-2026-14649 | 7.3 HIGH | code-projects Online Voting System saveVote.php test_input sql injection |
| CVE-2026-14648 | 7.3 HIGH | code-projects Online Voting System Login authentication.php test_input sql injection |
| CVE-2026-14658 | 6.3 MEDIUM | code-projects Assessment Management marking-scheme.php sql injection |
| CVE-2026-14657 | 6.3 MEDIUM | code-projects Assessment Management Database Query marking-scheme.php sql injection |
| CVE-2026-14656 | 4.3 MEDIUM | code-projects Assessment Management remove-user.php cross site scripting |
IV. Related Vulnerabilities
Same product: Assessment Management
- CVE-2026-14658
code-projects Assessment Management marking-scheme.php sql i - CVE-2026-14657
code-projects Assessment Management Database Query marking-s - CVE-2026-14656
code-projects Assessment Management remove-user.php cross si - CVE-2025-15196
code-projects Assessment Management login.php sql injection - CVE-2025-15195
code-projects Assessment Management add-module.php sql injec
Same vendor: code-projects
- CVE-2026-14660
code-projects Online Job Portal login.php sql injection - CVE-2026-14658
code-projects Assessment Management marking-scheme.php sql i - CVE-2026-14657
code-projects Assessment Management Database Query marking-s - CVE-2026-14656
code-projects Assessment Management remove-user.php cross si - CVE-2026-14649
code-projects Online Voting System saveVote.php test_input s
Same weakness: CWE-79
- CVE-2026-14656
code-projects Assessment Management remove-user.php cross si - CVE-2026-14634
kirilkirkov Ecommerce-CodeIgniter-Bootstrap Subscribed Email - CVE-2026-14633
kirilkirkov Ecommerce-CodeIgniter-Bootstrap Hidden REST API - CVE-2026-58524
Microsoft Edge (Chromium-based) Spoofing Vulnerability - CVE-2026-58298
Microsoft Edge (Chromium-based) Spoofing Vulnerability
V. Comments for CVE-2026-14655
No comments yet