CVE-2026-79793: code-projects Online Shopping System sumit_form.php cross site scripting
A vulnerability has been found in code-projects Online Shopping System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/sumitform.php. Such manipulation of the argument Success leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What access does an attacker need to exploit this issue?
The attack can be launched remotely and requires no privileges, but it requires user interaction. An attacker would need to cause a user to interact with a crafted request or content carrying a malicious Success argument.
Which component and input are affected?
The affected functionality is in /admin/sumit_form.php in Code-projects Online Shopping System 1.0. The Success argument can be manipulated to trigger cross-site scripting.
Is public exploit information available?
Yes. The exploit has been publicly disclosed and may be used.