CVE 4.8 MEDIUM

code-projects Simple IT Discussion Forum user.php cross site scripting_CVE-2026-6003

4.8 / 10
MEDIUM
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P

Description

A security vulnerability has been detected in code-projects Simple IT Discussion Forum 1.0. This issue affects some unknown processing of the file /admin/user.php. Such manipulation of the argument fname leads to cross site scripting. The attack may be performed from remote. The exploit has been disclosed publicly and may be used.

Basic Information

ID CVE-2026-6003
Source VulDB
Published Apr 10, 2026 at 02:15

Affected Product

Vendor code-projects
Product Simple IT Discussion Forum
Version 1.0
Affected Versions code-projects Simple IT Discussion Forum 1.0

CWE Classification

References

💭 Join the Security Discussion

🔒 Your email address will not be published. Required fields are marked *

⚠️ Please be respectful and constructive in your comments. Security discussions should remain professional.