A vulnerability classified as problematic was found in code-projects Exam Form Submission 1.0. The impacted element is an unknown function of the file /admin/update_fst.php. Executing a manipulation of the argument sname can lead to cross site scripting.
This vulnerability is registered as CVE-2026-5106. It is possible to launch the attack remotely. Furthermore, an exploit is available.