CVE-2026-86294: Sourcecodester Simple Traffic Offense System

Medium severity, CVSS 4.3. EPSS: 0.5% chance of exploitation in the next 30 days.

A vulnerability has been found in SourceCodester Simple Traffic Offense System 1.0. Affected by this issue is some unknown functionality of the file save-settings.php of the component Settings Update Endpoint. The manipulation of the argument site_name/site_desc leads to cross site scripting. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used.

Affected products

• Sourcecodester Simple Traffic Offense System: version 1.0 only

Published 2026-09-07. Last modified 2026-09-11.