CVE-2026-5255: code-projects Simple Laundry System Parameter delstaffinfo.php cross site scripting
Published Apr 1, 2026
·Updated
A vulnerability was detected in code-projects Simple Laundry System 1.0. This affects an unknown part of the file /delstaffinfo.php of the component Parameter Handler. The manipulation of the argument userid results in cross site scripting. The attack may be launched remotely. The exploit is now public and may be used.
Affected Software
2 affected components
Code-projects Simple Laundry System=1.0
Code-projects Simple Laundry System=1.0
Event History
Apr 1, 2026
CVE Published
via MITRE·05:15 AM
Data Sourced
via MITRE·05:15 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·06:16 AM
DescriptionSeverityWeaknessAffected Software
Feb 13, 58282
Event
via FIRST·12:52 PM
Frequently Asked Questions
1
What is the severity of CVE-2026-5255?
CVE-2026-5255 has been classified as a medium severity vulnerability.
2
How do I fix CVE-2026-5255?
To fix CVE-2026-5255, sanitize and validate all user inputs in the delstaffinfo.php file to prevent cross-site scripting.
3
What systems are affected by CVE-2026-5255?
CVE-2026-5255 affects Code-Projects Simple Laundry System version 1.0.
4
What type of vulnerability is CVE-2026-5255?
CVE-2026-5255 is a cross-site scripting (XSS) vulnerability.
5
What is the impact of CVE-2026-5255?
The impact of CVE-2026-5255 can allow an attacker to execute arbitrary JavaScript in the user's browser.