Low severity3.5NVD Advisory· Published Jun 28, 2026· Updated Jun 30, 2026

CVE-2026-13504

Description

A vulnerability has been found in code-projects Project Management System 1.0. This vulnerability affects unknown code of the file /mail.php of the component Mail Compose Page. Such manipulation leads to cross site scripting. The attack may be performed from remote. The exploit has been disclosed to the public and may be used.

Affected products

MyMySSS/Cve123llm-fuzzy
Code Projects/Project Management Systemllm-fuzzy
Range: = 1.0

Patches

Vulnerability mechanics

References

code-projects.orgnvd
github.com/MyMySSS/CVE123/blob/main/cve4/PMS_CVE_Submission.mdnvd
vuldb.com/cve/CVE-2026-13504nvd
vuldb.com/submit/838683nvd
vuldb.com/vuln/374499nvd
vuldb.com/vuln/374499/ctinvd

News mentions

No linked articles in our index yet.

cvss	0.227
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000