CVE-2026-9377

SourceCodester SUP Online Shopping productedit.php cross site scripting

CVSS 4.8 MEDIUMEPSS 0.2%CWE-79 CWE-94

A vulnerability was identified in SourceCodester SUP Online Shopping 1.0. The impacted element is an unknown function of the file /admin/productedit.php. The manipulation of the argument productName leads to cross site scripting. It is possible to initiate the attack remotely. The exploit is publicly available and might be used.

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P

Affected products

SourceCodester · SUP Online Shopping

public PoCs found — 1

cve_referencegithub.com/redshadowword-cell/CVE/issues/13unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://github.com/redshadowword-cell/CVE/issues/13 https://vuldb.com/submit/813270 https://vuldb.com/vuln/365340 https://vuldb.com/vuln/365340/cti https://www.sourcecodester.com/