CVE-2026-8117: SourceCodester Pizzafy Ecommerce System index.php cross site scripting
A security vulnerability has been detected in SourceCodester Pizzafy Ecommerce System 1.0. This issue affects some unknown processing of the file /admin/index.php. Such manipulation of the argument page leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed publicly and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-8117?
The severity of CVE-2026-8117 is considered critical due to its ability to allow cross-site scripting attacks.
How do I fix CVE-2026-8117?
To fix CVE-2026-8117, sanitize and validate user inputs in the /admin/index.php file to prevent XSS attacks.
What systems are affected by CVE-2026-8117?
CVE-2026-8117 affects SourceCodester Pizzafy Ecommerce System version 1.0.
What type of vulnerability is CVE-2026-8117?
CVE-2026-8117 is a cross-site scripting (XSS) vulnerability.
Can CVE-2026-8117 lead to data theft?
Yes, CVE-2026-8117 can lead to data theft as attackers can execute malicious scripts in the user's browser.