{"id":"CVE-2026-86238","title":"A vulnerability was determined in projectworlds Online Examination System 1.0","summary":"A vulnerability was determined in projectworlds Online Examination System 1.0. The affected element is an unknown function of the file feedback.php of the component Feedback Form. Executing a manipulation of the argument Name/Subject can…","severity":"medium","cvss":4.3,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","cwe":["CWE-79","CWE-94"],"vendor":"projectworlds","product":"Online Examination System","affected":["online_examination_system 1.0"],"published":"2026-09-07","updated":"2026-09-08","sourceUpdated":"2026-09-08T15:18:52.807","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-86238","references":[{"url":"https://github.com/CyberShailendra1/Online-Examination-System-Project","label":"cna@vuldb.com"},{"url":"https://vuldb.com/cve/CVE-2026-86238","label":"cna@vuldb.com"},{"url":"https://vuldb.com/submit/901822","label":"cna@vuldb.com"},{"url":"https://vuldb.com/vuln/399395","label":"cna@vuldb.com"},{"url":"https://vuldb.com/vuln/399395/cti","label":"cna@vuldb.com"}],"tags":["nvd","cve.org","exploit-available"],"exploitAvailable":true,"ssvc":{"exploitation":"poc","automatable":"no","technicalImpact":"partial","timestamp":"2026-09-08T15:00:07.291854Z"},"epss":0.00422,"epssPercentile":0.36193,"ingestedAt":"2026-09-07T12:10:14.962Z","slug":"CVE-2026-86238","body":"## Overview\n\nA vulnerability was determined in projectworlds Online Examination System 1.0. The affected element is an unknown function of the file feedback.php of the component Feedback Form. Executing a manipulation of the argument Name/Subject can lead to cross site scripting. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":36,"depthScoreParts":{"impact":23.7,"likelihood":0.1,"exploitation":12,"ransomware":0},"changes":[{"seq":5533,"id":"CVE-2026-86238","ts":1788887297404,"field":"exploit_available","old":"false","new":"true"},{"seq":4408,"id":"CVE-2026-86238","ts":1788886404680,"field":"exploit_available","old":"true","new":"false"},{"seq":3121,"id":"CVE-2026-86238","ts":1788883068562,"field":"exploit_available","old":"false","new":"true"},{"seq":2150,"id":"CVE-2026-86238","ts":1788882472559,"field":"exploit_available","old":"true","new":"false"},{"seq":306,"id":"CVE-2026-86238","ts":1788881646645,"field":"exploit_available","old":"false","new":"true"}]}