CVE-2026-6035: code-projects Vehicle Showroom Management System ServiceAndSalesReport.php cross site scripting
A vulnerability has been found in code-projects Vehicle Showroom Management System 1.0. The affected element is an unknown function of the file /BranchManagement/ServiceAndSalesReport.php. The manipulation of the argument BRANCHID leads to cross site scripting. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-6035?
The severity of CVE-2026-6035 is classified as low with a score of 2.1.
What type of vulnerability is CVE-2026-6035?
CVE-2026-6035 is a cross-site scripting (XSS) vulnerability.
How does the CVE-2026-6035 vulnerability occur?
The vulnerability occurs due to the manipulation of the BRANCH_ID argument in the ServiceAndSalesReport.php file.
What impact does CVE-2026-6035 have on security?
CVE-2026-6035 can lead to cross-site scripting attacks, allowing attackers to execute malicious scripts in the context of a user's browser.
How can CVE-2026-6035 be mitigated?
Mitigation for CVE-2026-6035 includes validating and sanitizing user inputs to prevent script injection.