Is CVE-2026-86294 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-86294?

CVE-2026-86294 has a CVSS v3 severity of MEDIUM (4.3).

Back

CVE-2026-86294

Description

A vulnerability has been found in SourceCodester Simple Traffic Offense System 1.0. Affected by this issue is some unknown functionality of the file save-settings.php of the component Settings Update Endpoint. The manipulation of the argument site_name/site_desc leads to cross site scripting. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used.