What’s Vulnerable › Vulnerabilities

CVE-2026-4849: code-projects Simple Laundry System Parameter modify.php cross site scripting

• Severity: medium (CVSS 6.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2026-03-26 · updated 2026-06-17
• Weakness: CWE-79

Description

A vulnerability was identified in code-projects Simple Laundry System 1.0. This impacts an unknown function of the file /modify.php of the component Parameter Handler. The manipulation of the argument firstName leads to cross site scripting. The attack may be initiated remotely. The exploit is publicly available and might be used.

Affected products

• code-projects Simple Laundry System: 1.0

References

• https://code-projects.org/
• https://github.com/kbloow/CVE/issues/2
• https://vuldb.com/?ctiid.353154
• https://vuldb.com/?id.353154
• https://vuldb.com/?submit.776183

Get alerted when CVE-2026-4849 or the next vulnerability affects your stack