CVE-2026-5539

code-projects Simple Laundry System Parameter modifymember.php cross site scripting

CVSS 5.3 MEDIUMEPSS 0.3%CWE-79 CWE-94

A flaw has been found in code-projects Simple Laundry System 1.0. This affects an unknown part of the file /modifymember.php of the component Parameter Handler. This manipulation of the argument firstName causes cross site scripting. The attack can be initiated remotely. The exploit has been published and may be used.

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P

Produtos afetados

code-projects · Simple Laundry System

PoCs públicas encontradas — 1

cve_referencegithub.com/boyslikesports/vul-web/issues/5não verificado

⚠ Recursos públicos, para você avaliar a exposição de sistemas que controla ou está autorizado a testar. Teste apenas com autorização.

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

https://code-projects.org/https://github.com/boyslikesports/vul-web/issues/5 https://vuldb.com/submit/782221 https://vuldb.com/vuln/355292 https://vuldb.com/vuln/355292/cti