CVE-2026-5836: code-projects Online Shoe Store admin_product.php cross site scripting
A vulnerability has been found in code-projects Online Shoe Store 1.0. Affected by this issue is some unknown functionality of the file /admin/adminproduct.php. The manipulation of the argument productname leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-5836?
CVE-2026-5836 is considered a moderate severity vulnerability due to its potential for cross-site scripting attacks.
How do I fix CVE-2026-5836?
To fix CVE-2026-5836, implement input validation and sanitization for the product_name parameter in the admin_product.php file.
What systems are affected by CVE-2026-5836?
CVE-2026-5836 affects version 1.0 of the code-projects Online Shoe Store application.
What kind of attacks can CVE-2026-5836 facilitate?
CVE-2026-5836 can facilitate cross-site scripting (XSS) attacks, allowing attackers to execute arbitrary scripts in users' browsers.
Is there a patch available for CVE-2026-5836?
As of now, there is no official patch released specifically for CVE-2026-5836, so manual mitigation is required.