What’s Vulnerable › Vulnerabilities

CVE-2026-1444: iJason-Liu Books_Manager add_book_check.php cross site scripting

• Severity: low (CVSS 2.4 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-01-26 · updated 2026-06-17
• Weakness: CWE-79

Description

A vulnerability has been found in iJason-Liu Books_Manager up to 298ba736387ca37810466349af13a0fdf828e99c. This affects an unknown part of the file controllers/books_center/add_book_check.php. Such manipulation of the argument mark leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. This product does not use versioning. This is why information about affected and unaffected releases are unavailable.

Affected products

• iJason-Liu Books_Manager: 298ba736387ca37810466349af13a0fdf828e99c

References

• https://blog.y1fan.work/2026/01/13/%E5%AD%98%E5%82%A8%E5%9E%8Bxss/
• https://vuldb.com/?ctiid.342873
• https://vuldb.com/?id.342873
• https://vuldb.com/?submit.736968

Get alerted when CVE-2026-1444 or the next vulnerability affects your stack