CVE-2026-4973: Sourcecodester Online Quiz System

Low severity, CVSS 3.5. EPSS: 0.3% chance of exploitation in the next 30 days.

A vulnerability was detected in SourceCodester Online Quiz System up to 1.0. Affected by this vulnerability is an unknown functionality of the file endpoint/add-question.php. Performing a manipulation of the argument quiz_question results in cross site scripting. It is possible to initiate the attack remotely. The exploit is now public and may be used.

Affected products

• Sourcecodester Online Quiz System: version 1.0 only

Published 2026-03-27. Last modified 2026-06-17.