CVE-2026-19904
LowCVSS 2.4Exploitation Probability (EPSS)
Low risk11th percentile - higher than 11% of all known CVEs
Summary
A vulnerability was found in SourceCodester Online Book Store System 1.0. It affects unknown code in the file /admin/index.php?page=site_settings of the System Settings Module. The manipulation leads to cross-site scripting. The attack can be executed remotely, and the exploit is publicly available.
Risk Assessment
The risk involves the possibility of remote execution of malicious scripts in the context of the admin panel, which could lead to admin session hijacking, settings modification, or data theft.
Recommendation
It is recommended to apply patches or updates immediately, and to validate and sanitize input data in the system settings module to prevent XSS attacks.
Original NVD description (English source)
A vulnerability was found in SourceCodester Online Book Store System 1.0. This vulnerability affects unknown code of the file /admin/index.php?page=site_settings of the component System Settings Module. The manipulation results in cross site scripting. The attack can be executed remotely. The exploit has been made public and could be used.