CVE-2026-0586 — code-projects Online Product Reservation System prod.php cross site scripting
A vulnerability was detected in code-projects Online Product Reservation System 1.0. The affected element is an unknown function of the file handgunner-administrator/prod.php. P…
Published: 2026-01-05 · CVSS: 5.3 · CVSS 4.0
A vulnerability was detected in code-projects Online Product Reservation System 1.0. The affected element is an unknown function of the file handgunner-administrator/prod.php. Performing a manipulation of the argument cat results in cross site scripting. The attack is possible to be carried out remotely. The exploit is now public and may be used.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7