CVE-2026-7089: code-projects Home Service System Appointment Booking booking.php cross site scripting
A security vulnerability has been detected in code-projects Home Service System 1.0. The impacted element is an unknown function of the file /booking.php of the component Appointment Booking. The manipulation of the argument fname/lname leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed publicly and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-7089?
CVE-2026-7089 has a severity rating of medium due to its potential for cross-site scripting attacks.
How do I fix CVE-2026-7089?
To fix CVE-2026-7089, ensure that proper input validation and output encoding are implemented in the booking.php file.
What software is affected by CVE-2026-7089?
CVE-2026-7089 affects Code-Projects Home Service System version 1.0.
What type of vulnerability is CVE-2026-7089?
CVE-2026-7089 is classified as a cross-site scripting (XSS) vulnerability.
What components are involved in CVE-2026-7089?
CVE-2026-7089 involves the Appointment Booking component within the booking.php file.