CVE-2026-1135: medium-severity vulnerability in itsourcecode Society Management System
itsourcecode Society Management System activity.php cross site scripting
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 5.3epss 0.4%
A security flaw has been discovered in itsourcecode Society Management System 1.0. This impacts an unknown function of the file /admin/activity.php. The manipulation of the argument Title results in cross site scripting. The attack may be launched remotely. The exploit has been released to the public and may be used for attacks.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P
Affected products
itsourcecode · Society Management SystemRelated CVEs — itsourcecode Society Management System
In the same product, most dangerous first.
CVE-2024-7192MEDIUMitsourcecode Society Management System student.php unrestricted uploadEPSS 0.6%CVE-2024-7191MEDIUMitsourcecode Society Management System get_balance.php sql injectionEPSS 0.6%CVE-2024-7195MEDIUMitsourcecode Society Management System check_admin.php sql injectionEPSS 0.5%CVE-2024-7190MEDIUMitsourcecode Society Management System get_price.php sql injectionEPSS 0.5%CVE-2024-7194MEDIUMitsourcecode Society Management System check_student.php sql injectionEPSS 0.5%CVE-2026-1593MEDIUMitsourcecode Society Management System edit_expenses_query.php sql injectionEPSS 0.5%