CVE-2026-86294
A vulnerability has been found in SourceCodester Simple Traffic Offense System 1.0. Affected by this issue is some unknown functionality of the file save-settings.php of the component Settings Update Endpoint. The manipulation of the argument site_name/site_desc leads to cross site scripting. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used.
- Published Sep 7, 2026
- CVSS 2.1 low
- 0.5% chance of exploitation in the next 30 days (EPSS)