CVE-2026-5834: code-projects Online Shoe Store admin_running.php cross site scripting
A vulnerability was detected in code-projects Online Shoe Store 1.0. Affected is an unknown function of the file /admin/adminrunning.php. Performing a manipulation of the argument productname results in cross site scripting. It is possible to initiate the attack remotely. The exploit is now public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-5834?
CVE-2026-5834 has a moderate severity level due to the potential for cross site scripting attacks.
How do I fix CVE-2026-5834?
To fix CVE-2026-5834, sanitize and validate the 'product_name' input to prevent execution of malicious scripts.
What types of attacks are possible with CVE-2026-5834?
CVE-2026-5834 allows attackers to perform cross site scripting (XSS) attacks, which can compromise user sessions or deliver malicious payloads.
Which software versions are affected by CVE-2026-5834?
CVE-2026-5834 affects version 1.0 of the code-projects Online Shoe Store.
What file contains the vulnerability in CVE-2026-5834?
The vulnerability in CVE-2026-5834 is present in the /admin/admin_running.php file.