CVE-2026-4849: code-projects Simple Laundry System Parameter modify.php cross site scripting
A vulnerability was identified in code-projects Simple Laundry System 1.0. This impacts an unknown function of the file /modify.php of the component Parameter Handler. The manipulation of the argument firstName leads to cross site scripting. The attack may be initiated remotely. The exploit is publicly available and might be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-4849?
CVE-2026-4849 has been classified as a high severity vulnerability due to its potential for cross-site scripting attacks.
How do I fix CVE-2026-4849?
To fix CVE-2026-4849, developers should sanitize and validate the input received in the firstName parameter before processing it.
Who is affected by CVE-2026-4849?
CVE-2026-4849 affects users of the code-projects Simple Laundry System version 1.0.
What type of vulnerability is CVE-2026-4849?
CVE-2026-4849 is a cross-site scripting (XSS) vulnerability.
What component is involved in CVE-2026-4849?
The vulnerability CVE-2026-4849 involves the Parameter Handler in the modify.php file of the Simple Laundry System.