CVE-2026-14656 MEDIUM

CVE-2026-14656: code-projects Assessment Management remove-user.php cross site scripting

Vendor Code-Projects
Product Assessment Management
Weakness CWE-79 · XSS
Published July 4, 2026
Last update July 6, 2026
View on NVD All CVEs

CVSS base score

5.3/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction —
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P

What the vulnerability does

01Description

A security vulnerability has been detected in code-projects Assessment Management 1.0. This affects an unknown part of the file /admin/remove-user.php. The manipulation of the argument ID leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used.

Key dates

02Disclosure timeline

July 4, 2026 CVE published
July 6, 2026 Record updated

Related vulnerabilities

04Related CVE

CVE-2026-66640 WordPress Login With Ajax plugin <= 4.5.1 - Cross Site Scripting (XSS) vulnerability CVE-2026-66426 WordPress WP-Stats plugin <= 2.56 - Cross Site Scripting (XSS) vulnerability CVE-2026-73360 WordPress Chaty Pro plugin <= 3.5.8 - Cross Site Scripting (XSS) vulnerability CVE-2026-75948 Joomla Extension - icagenda.com - Authenticated Stored XSS in iCagenda 4.0.8 to 4.0.12 CVE-2026-66610 WordPress Urna theme <= 2.6.2 - Cross Site Scripting (XSS) vulnerability