CVE-2026-1134: itsourcecode Society Management System expenses.php cross site scripting
A vulnerability was identified in itsourcecode Society Management System 1.0. This affects an unknown function of the file /admin/expenses.php. The manipulation of the argument detail leads to cross site scripting. The attack may be initiated remotely. The exploit is publicly available and might be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-1134?
CVE-2026-1134 has been classified as a cross-site scripting (XSS) vulnerability, which can lead to potential data theft or session hijacking.
How do I fix CVE-2026-1134?
To fix CVE-2026-1134, you should sanitize and validate the input from the 'detail' parameter in the /admin/expenses.php file to prevent XSS attacks.
What potential impact does CVE-2026-1134 have on my application?
The impact of CVE-2026-1134 includes the possibility of attackers executing scripts in the context of users' browsers, leading to unauthorized actions or data exposure.
Which version of the Society Management System is affected by CVE-2026-1134?
CVE-2026-1134 affects version 1.0 of the itsourcecode Society Management System.
Is user data at risk due to CVE-2026-1134?
Yes, user data is at risk due to CVE-2026-1134 as the vulnerability can allow attackers to manipulate user sessions and potentially access sensitive information.