CVE-2026-5539

MEDIUM CVSS 4.3 View on NVD ↗

Description

A flaw has been found in code-projects Simple Laundry System 1.0. This affects an unknown part of the file /modifymember.php of the component Parameter Handler. This manipulation of the argument firstName causes cross site scripting. The attack can be initiated remotely. The exploit has been published and may be used.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

References

https://code-projects.org/
https://github.com/boyslikesports/vul-web/issues/5
https://vuldb.com/submit/782221
https://vuldb.com/vuln/355292
https://vuldb.com/vuln/355292/cti

Published: Apr 05, 2026 04:16 UTC Modified: Apr 05, 2026 04:16 UTC