CVE-2026-19998: code-projects Online Shopping System offersmail.php cross site scripting

Published Aug 17, 2026

Updated

A weakness has been identified in code-projects Online Shopping System 1.0. Impacted is an unknown function of the file offersmail.php. Executing a manipulation of the argument email can lead to cross site scripting. The attack may be performed from remote. The exploit has been made available to the public and could be used for attacks.

Affected Software

1 affected component

Code-projects Online Shopping System=1.0

Event History

Aug 17, 2026

CVE Published

via MITRE·07:15 AM

Data Sourced

via MITRE·07:15 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·08:16 AM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2026-19998?

The severity of CVE-2026-19998 is medium with a score of 4.3.

How does CVE-2026-19998 affect users?

CVE-2026-19998 allows for cross site scripting (XSS) attacks through manipulation of the email argument in offersmail.php.

What software is impacted by CVE-2026-19998?

CVE-2026-19998 impacts the Code-projects Online Shopping System version 1.0.

How can I mitigate the risks of CVE-2026-19998?

To mitigate CVE-2026-19998, ensure proper input validation and sanitization are implemented for the email parameter in offersmail.php.

Can CVE-2026-19998 be exploited remotely?

Yes, CVE-2026-19998 can be exploited remotely, allowing attackers to execute cross site scripting attacks.