CVE-2026-9527

Name of the Vulnerable Software and Affected Versions itsourcecode Electronic Judging System version 1.0

Description An issue exists in the processing of the '/admin/judges.php' endpoint. Manipulation of the fname argument allows for cross-site scripting, which can be exploited remotely.

Recommendations Update itsourcecode Electronic Judging System version 1.0 to a newer version that contains a fix. As a temporary workaround, restrict access to the '/admin/judges.php' endpoint or avoid using the fname parameter until the issue is resolved.