CVE-2026-0586

Publication date

2026-01-05 10:32:06

Family

VulDB

State

PUBLISHED

Description

A vulnerability was detected in code-projects Online Product Reservation System 1.0. The affected element is an unknown function of the file handgunner-administrator/prod.php. Performing a manipulation of the argument cat results in cross site scripting. The attack is possible to be carried out remotely. The exploit is now public and may be used.