Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A vulnerability was detected in code-projects Chat System 1.0. This affects an unknown function of the file /admin/send_message.php of the component Chat Interface. The manipulation of the argument msg results in cross site scripting. The attack may be launched remotely. The exploit is now public and may be used.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2026-7090 A vulnerability was detected in code-projects Chat System 1.0. This affects an unknown function of the file /admin/send_message.php of the component Chat Interface. The… https://www.cve.org/CVERecord?id=CVE-2026-7090
Post summary
A new CVE (CVE-2026-7090) has been reported for an unknown function in the /admin/send_message.php file of code-projects Chat System 1.0; no further details or remediation guidance are provided.
CVE-2026-7090 Cross-Site Scripting in Code-Projects Chat System 1.0 Admin Interface https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-7090
Post summary
The entry reports a Cross‑Site Scripting vulnerability in the admin interface of Code‑Projects Chat System 1.0, but provides no PoC, exploit code, evidence of active exploitation, or patch information.