CVE-2026-91854

🗓️ 15 Sep 2026 16:30:05Reported by VulDBType

A vulnerability was identified in code-projects Record Management System 1.0. Affected is an unknown function of the file main/reg.php. Such manipulation of the argument desc leads to cross site scripting. The attack may be launched remotely. The ...

Reporter	Title	Published	Views	Family All 4
Cvelist	CVE-2026-91854 code-projects Record Management System reg.php cross site scripting	15 Sep 202616:30	–	cvelist
EUVD	EUVD-2026-78826	15 Sep 202616:30	–	euvd
NVD	CVE-2026-91854	15 Sep 202617:17	–	nvd
Positive Technologies	PT-2026-92133	15 Sep 202600:00	–	ptsecurity

Vulners

Node

code-projects record_management_systemMatch1.0

[
  {
    "vendor": "code-projects",
    "product": "Record Management System",
    "versions": [
      {
        "version": "1.0",
        "status": "affected"
      }
    ],
    "cpes": [
      "cpe:2.3:a:code-projects:record_management_system:*:*:*:*:*:*:*:*"
    ]
  }
]

Source	Link
vuldb	www.vuldb.com/vuln/404085/cti
vuldb	www.vuldb.com/cve/CVE-2026-91854
github	www.github.com/luciferllll/CVE/blob/main/Record_ManagementSystem%20PHP/Stored%20XSS.md
code-projects	www.code-projects.org/
vuldb	www.vuldb.com/submit/933811
vuldb	www.vuldb.com/vuln/404085

15 Sep 2026 17:17Current

3.7Low risk

Vulners AI Score3.7

CVSS 3.14.3

CVSS 25

CVSS 45.3

CVSS 34.3