CVE-2026-86238Medium· 4.3▾ TwilightPoC availableA vulnerability was determined in projectworlds Online Examination System 1.0. The affected element is an unknown function of the file feedback.php of the component Feedback Form. Executing a manipulation of the argument Name/Subject can…
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 23.7 · likelihood 0.1 · exploitation 12
A public proof-of-concept already exists for this vulnerability — see Exploit availability below.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake.
Exploit-prediction probability, daily snapshots since Sep 7.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
0.4%
Last analysed / modified upstream
Exploit / PoC code exists
0.4% → 0.4%
A vulnerability was determined in projectworlds Online Examination System 1.0. The affected element is an unknown function of the file feedback.php of the component Feedback Form. Executing a manipulation of the argument Name/Subject can lead to cross site scripting. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized.
Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Field changes observed since this record was first indexed.
Connected by shared product, vendor, weakness, or advisory.
CVE-2025-11425Low· 2.4A vulnerability was identified in projectworlds Advanced Library Management System 1.0
CVE-2025-12227Low· 3.5A vulnerability was determined in projectworlds Gate Pass Management System 1.0
CVE-2025-11067Low· 2.4A vulnerability has been found in Projectworlds Visitor Management System 1.0
CVE-2025-12231Low· 2.4A security vulnerability has been detected in projectworlds Expense Management System 1.0
CVE-2025-12230Low· 2.4A weakness has been identified in projectworlds Expense Management System 1.0
CVE-2025-12229Low· 2.4A security flaw has been discovered in projectworlds Expense Management System 1.0