Login Request a demo
Low severity · published Sep 6, 2026
CVE-2026-86181
code-projects Task Management System User Profile Update UpdateUserProfile.php cross site scripting
3.5
CVSS
0.4%
EPSS
No
On KEV
Description
A vulnerability was found in code-projects Task Management System 1.0. Affected by this issue is some unknown functionality of the file /user/UpdateUserProfile.php of the component User Profile Update. The manipulation of the argument lname results in cross site scripting. The attack can be launched remotely. The exploit has been made public and could be used.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
Required
Confidentiality
None
Integrity
Low
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 30% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
TM
Task Management System · code-projects
1.0 · source: vendor
Affected product
TM
Task Management System
code-projects
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-86181
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-86181
code-projects.org
https://code-projects.org/
github.com
https://github.com/ahmadmarz10-hub/CVEsMarz/blob/main/Stored%20Cross-Site%20Scripting%20(XSS)%20in%20Task%20Management%20System%20%60lname%60%20Parameter.md
vuldb.com
https://vuldb.com/cve/CVE-2026-86181
vuldb.com
https://vuldb.com/submit/896153
vuldb.com
https://vuldb.com/submit/897266
vuldb.com
https://vuldb.com/submit/897268
More from Task Management System
7.3
CVE-2026-75778
code-projects Task Management System Login Form index.php select_with_multiple_condition sql injection
7.3
CVE-2026-19344
code-projects Task Management System comment_count_user.php sql injection
7.3
CVE-2026-19343
code-projects Task Management System AdminLogin.php sql injection
7.3
CVE-2026-19342
code-projects Task Management System Login index.php improper authentication
6.5
CVE-2026-19345
code-projects Task Management System UpdateTaskStatus.php authorization