A vulnerability was detected in code-projects Simple Laundry System 1.0. This affects an unknown part of the file /delstaffinfo.php of the component Parameter Handler. The manipulation of the argument userid results in cross site scripting. The attack may be launched remotely. The exploit is now public and may be used.
Fix
Patch, vendor advisory and mitigation references on NVD 1
- https://github.com/kunlan567-boop/test/issues/2 Exploit, Issue Tracking, Mitigation, Third Party Advisory
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
Change history 1
- First seenCVSS 2.1 · code-projectsNVD modified 2026-10-26 21:10
Affected (CPE criteria) 1
cpe:2.3:a:code-projects:simple_laundry_system:1.0:*:*:*:*:*:*:*
References 5
- https://code-projects.org/ Product
- https://github.com/kunlan567-boop/test/issues/2 Exploit, Issue Tracking, Mitigation, Third Party Advisory
- https://vuldb.com/submit/780617 Third Party Advisory, VDB Entry
- https://vuldb.com/vuln/354445 Third Party Advisory, VDB Entry
- https://vuldb.com/vuln/354445/cti Permissions Required, VDB Entry