CVE-2026-6150: code-projects Simple Laundry System checkupdatestatus.php cross site scripting
A vulnerability has been found in code-projects Simple Laundry System 1.0. This affects an unknown part of the file /checkupdatestatus.php. The manipulation of the argument serviceId leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-6150?
CVE-2026-6150 is classified as a cross-site scripting vulnerability, which can lead to security risks such as data theft and session hijacking.
How do I fix CVE-2026-6150?
To fix CVE-2026-6150, input validation should be implemented to sanitize the 'serviceId' parameter used in checkupdatestatus.php.
What versions of Simple Laundry System are affected by CVE-2026-6150?
CVE-2026-6150 affects version 1.0 of Code-Projects Simple Laundry System.
Can CVE-2026-6150 be exploited remotely?
Yes, CVE-2026-6150 can be exploited remotely since it involves cross-site scripting through a web application.
Is there a workaround for CVE-2026-6150 until a patch is available?
As a temporary workaround for CVE-2026-6150, developers can implement input sanitization on user inputs in the affected script.