CVE Catalog
CVE-2026-5835
LowCVSS 2.4Exploitation Probability (EPSS)
Low risk0.21%
11th percentile - higher than 11% of all known CVEs
Summary
The code-projects Online Shoe Store 1.0 is vulnerable to XSS in /admin/admin_football.php via the product_name argument. The attack is remote and the exploit is public.
Risk Assessment
An attacker can inject malicious code that executes in the admin context, enabling data theft or panel takeover.
Recommendation
Update the application or apply input filtering in admin_football.php.
Original NVD description (English source)
A flaw has been found in code-projects Online Shoe Store 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/admin_football.php. Executing a manipulation of the argument product_name can lead to cross site scripting. It is possible to launch the attack remotely. The exploit has been published and may be used.