CVE-2026-5825

MediumCVSS 4.3

Published: 09/04/2026(UTC)Updated: 24/07/2026(UTC)Translated: 25/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.36%

28th percentile - higher than 28% of all known CVEs

Summary

code-projects Simple Laundry System 1.0 has a cross-site scripting vulnerability in /delmemberinfo.php via the userid argument. The attack can be initiated remotely. The exploit is public and may be used.

Risk Assessment

The risk is that an attacker can remotely inject malicious scripts, potentially leading to session theft, redirects, or other actions on the site.

Recommendation

Immediately validate and sanitize input in /delmemberinfo.php and consider updating or replacing the software.

Original NVD description (English source)

A vulnerability was detected in code-projects Simple Laundry System 1.0. This vulnerability affects unknown code of the file /delmemberinfo.php. Performing a manipulation of the argument userid results in cross site scripting. The attack can be initiated remotely. The exploit is now public and may be used.