CVE-2026-2214 - code-projects for Plugin AdminAddAlbum.php cross site scripting

CVE ID : CVE-2026-2214 Published : Feb. 9, 2026, 5:16 a.m. | 50 minutes ago Description : A weakness has been identified in code-projects for Plugin 1.0. This affects an unknown part of the file /Administrator/PHP/AdminAddAlbum.php. This manipulation of the argument txtalbum causes cross site scripting. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be used for attacks. Severity: 4.8 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...