CVE-2026-3702: SourceCodester Loan Management System index.php cross site scripting
A vulnerability was detected in SourceCodester Loan Management System 1.0. Affected by this issue is some unknown functionality of the file /index.php. Performing a manipulation of the argument page results in cross site scripting. The attack is possible to be carried out remotely. The exploit is now public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-3702?
The severity of CVE-2026-3702 is classified as high due to the potential for cross-site scripting attacks.
How do I fix CVE-2026-3702?
To fix CVE-2026-3702, sanitize and validate all user inputs on the /index.php page to prevent cross-site scripting.
What software is affected by CVE-2026-3702?
CVE-2026-3702 affects the SourceCodester Loan Management System version 1.0.
What type of vulnerability is CVE-2026-3702?
CVE-2026-3702 is a cross-site scripting (XSS) vulnerability.
Can CVE-2026-3702 be exploited remotely?
Yes, CVE-2026-3702 can be exploited remotely by manipulating the argument page in the /index.php file.