CVE-2026-5647: code-projects Online Shoe Store Add Product admin_feature.php cross site scripting
A vulnerability was detected in code-projects Online Shoe Store 1.0. This affects an unknown part of the file /admin/adminfeature.php of the component Add Product Page. The manipulation of the argument productname results in cross site scripting. The attack may be launched remotely. The exploit is now public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-5647?
CVE-2026-5647 is classified as a cross-site scripting (XSS) vulnerability, which can lead to significant security risks.
How do I fix CVE-2026-5647?
To fix CVE-2026-5647, sanitize and validate user input in the product_name parameter of the admin_feature.php file.
What software is affected by CVE-2026-5647?
CVE-2026-5647 affects version 1.0 of the code-projects Online Shoe Store.
What is the impact of CVE-2026-5647?
The impact of CVE-2026-5647 is that an attacker could execute arbitrary JavaScript code in the context of the affected web application.
Are there any known exploits for CVE-2026-5647?
As of now, specific exploits for CVE-2026-5647 have not been publicly disclosed, but the nature of XSS vulnerabilities makes them inherently dangerous.