CVE-2026-90795: itsourcecode Loan Management System navbar.php cross site scripting

Severity: medium (CVSS 4.3 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-09-14 · updated 2026-09-15
Weakness: CWE-79

Description

A vulnerability was determined in itsourcecode Loan Management System 1.0. The impacted element is an unknown function of the file navbar.php. Executing a manipulation of the argument page can lead to cross site scripting. It is possible to launch the attack remotely. The exploit has been publicly disclosed and may be utilized.

Affected products

itsourcecode Loan Management System: 1.0

References

https://github.com/ch4os4/re-function/issues/1
https://itsourcecode.com/
https://vuldb.com/cve/CVE-2026-90795
https://vuldb.com/submit/919770
https://vuldb.com/vuln/403301
https://vuldb.com/vuln/403301/cti

Get alerted when CVE-2026-90795 or the next vulnerability affects your stack