CVE-2026-5539
MediumCVSS 4.3Exploitation Probability (EPSS)
Low risk21th percentile - higher than 21% of all known CVEs
Summary
The Simple Laundry System 1.0 has an XSS vulnerability in the file /modifymember.php. Manipulation of the firstName argument leads to reflected XSS. The attack can be launched remotely, and the exploit has been published.
Risk Assessment
An attacker can inject malicious script that executes in the administrator's browser, potentially leading to session theft or data modification.
Recommendation
Immediately apply patches from the vendor or temporarily disable the member modification function.
Original NVD description (English source)
A flaw has been found in code-projects Simple Laundry System 1.0. This affects an unknown part of the file /modifymember.php of the component Parameter Handler. This manipulation of the argument firstName causes cross site scripting. The attack can be initiated remotely. The exploit has been published and may be used.