Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A flaw has been found in code-projects Exam Form Submission 1.0. The impacted element is an unknown function of the file /admin/update_fst.php. Executing a manipulation of the argument sname can lead to cross site scripting. It is possible to launch the attack remotely. The exploit has been published and may be used.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
🚨 CYBERDUDEBIVASH SENTINEL APEX ALERT 🚨 Threat: CVE-2026-5106 - code-projects Exam Form Submission update_fst.php cross site scripting Intel Report: https://ift.tt/YA6Zwkd
Post summary
The tweet announces the discovery of CVE-2026-5106, a cross‑site scripting vulnerability in code‑projects Exam Form Submission update_fst.php, and provides a link to an Intel Report for further details.
CVE-2026-5106 A flaw has been found in code-projects Exam Form Submission 1.0. The impacted element is an unknown function of the file /admin/update_fst.php. Executing a manipulation… https://www.cve.org/CVERecord?id=CVE-2026-5106
Post summary
The text provides a brief mention of CVE-2026-5106 with no actionable details or evidence of exploitation, making it a minimal disclosure.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | code-projects | exam_form_submission | 1.0 | - | - |