CVE-2026-4835: code-projects Accounting System Web Application add_costumer.php cross site scripting

Published Mar 26, 2026

Updated

A security vulnerability has been detected in code-projects Accounting System 1.0. Impacted is an unknown function of the file /myaccount/addcostumer.php of the component Web Application Interface. Such manipulation of the argument costumername leads to cross site scripting. The attack may be performed from remote. The exploit has been disclosed publicly and may be used.

Affected Software

1 affected component

Code-projects Accounting System=1.0

Event History

Mar 26, 2026

CVE Published

via MITRE·01:52 AM

Data Sourced

via MITRE·01:52 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·03:16 AM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2026-4835?

CVE-2026-4835 is classified as a cross-site scripting (XSS) vulnerability that can lead to unauthorized actions on behalf of users.

How do I fix CVE-2026-4835?

To fix CVE-2026-4835, sanitize and validate user inputs in the add_costumer.php file to prevent XSS exploits.

What components are affected by CVE-2026-4835?

CVE-2026-4835 affects the add_costumer.php function of the Web Application Interface in the code-projects Accounting System version 1.0.

Who is impacted by CVE-2026-4835?

Users of the code-projects Accounting System version 1.0 are at risk from CVE-2026-4835 due to the vulnerability in the application.

What are the potential impacts of CVE-2026-4835?

Exploitation of CVE-2026-4835 could lead to data theft, session hijacking, or malicious actions taken on behalf of the user.