CVE-2026-19904: SourceCodester Online Book Store System System Settings index.php site_settings cross site scripting
Published Aug 15, 2026
·Updated
A vulnerability was found in SourceCodester Online Book Store System 1.0. This vulnerability affects unknown code of the file /admin/index.php?page=sitesettings of the component System Settings Module. The manipulation results in cross site scripting. The attack can be executed remotely. The exploit has been made public and could be used.
Affected Software
1 affected component
Sourcecodester SourceCodester Online Book Store System=1.0
Event History
Aug 15, 2026
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2026-19904?
CVE-2026-19904 has a low severity rating of 2.4.
2
How do I fix CVE-2026-19904?
To mitigate CVE-2026-19904, ensure to sanitize user inputs and implement proper output encoding in the system settings module.
3
What type of vulnerability is CVE-2026-19904?
CVE-2026-19904 is a cross-site scripting (XSS) vulnerability.
4
Can CVE-2026-19904 be exploited remotely?
Yes, CVE-2026-19904 can be exploited remotely by an attacker.
5
Which component is affected by CVE-2026-19904?
CVE-2026-19904 affects the System Settings Module in SourceCodester Online Book Store System.