CVE-2026-79793
MediumCVSS 4.3Exploitation Probability (EPSS)
Low risk37th percentile - higher than 37% of all known CVEs
Summary
A vulnerability has been found in code-projects Online Shopping System 1.0. Affected is an unknown functionality of the file /admin/sumit_form.php. Manipulation of the argument Success leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Risk Assessment
An attacker could exploit XSS to execute malicious scripts in the administrator's browser, potentially leading to session theft, account takeover, or other harmful actions.
Recommendation
Apply patches or update the system immediately, and validate/sanitize input in /admin/sumit_form.php.
Other vulnerabilities in Online Shopping System
See all- CVE-2026-19998Medium
A cross-site scripting vulnerability has been detected in Online Shopping System 1.0 by code-projects in file offersmail.php. Manipulation of the email argument leads to XSS. The attack can be performed remotely, and the exploit is publicly available.
- CVE-2026-19919High
A SQL injection vulnerability has been found in the Online Shopping System 1.0 by code-projects. It affects an unknown function in the file /login.php of the Login component. Manipulation of the email argument results in SQL injection. The attack can be performed remotely, and the exploit has been made public.
Original NVD description (English source)
A vulnerability has been found in code-projects Online Shopping System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/sumit_form.php. Such manipulation of the argument Success leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.