CVE-2026-13232

CVE-2026-13232 affects Drupal Advanced Content Feedback (admin_feedback) versions 0.0.0–2.8.0. The root cause is insufficient authorization verification when processing a comment submission, leading to an Insecure Direct Object Reference/forceful browsing-style access bypass of targeted feedback ...

CVE-2025-56697

A Stored Cross-Site Scripting XSS vulnerability was discovered in the /users/adminpanel/admin/home.php?page=feedbacks file of Kashipara Computer Base Test v1.0. Attackers can inject malicious scripts via the smyFeedbacks POST parameter in /users/home.php...

PT-2025-37919

Name of the Vulnerable Software and Affected Versions: Kashipara Computer Base Test version 1.0 Description: A Stored Cross-Site Scripting XSS vulnerability exists in the /users/adminpanel/admin/home.php?page=feedbacks file. Attackers can inject malicious scripts via the smyFeedbacks POST paramet...

CVE-2024-40478

A Stored Cross Site Scripting XSS vulnerability was found in "/admin/afeedback.php" in Kashipara Online Exam System v1.0, which allows remote attackers to execute arbitrary code via "rname" and "email" parameter fields...

PT-2024-28865 · Unknown · Kashipara Online Exam System

Name of the Vulnerable Software and Affected Versions: Kashipara Online Exam System version 1.0 Description: A Stored Cross Site Scripting XSS issue was found in the "/admin/afeedback.php" endpoint, allowing remote attackers to execute arbitrary code via the rname and email parameter fields. This...