A vulnerability was found in code-projects Exam Form Submission 1.0. It has been declared as problematic. The impacted element is an unknown function of the file /admin/update_s3.php. Executing a manipulation of the argument sname can lead to cross site scripting.
The identification of this vulnerability is CVE-2026-4578. The attack may be launched remotely. Furthermore, there is an exploit available.
