PT-2026-28650 · Code Projects · Simple Laundry System

Kbloow · Published 2026-03-26 · Updated 2026-03-26 · CVE-2026-4849

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions code-projects Simple Laundry System version 1.0

Description A cross site scripting issue exists in the Parameter Handler component of code-projects Simple Laundry System. The issue is related to the manipulation of the firstName argument within the /modify.php file. The attack can be initiated remotely and the exploit is publicly available.

Recommendations Apply any available updates to address the issue in the Parameter Handler component of the affected system. As a temporary workaround, consider restricting access to the /modify.php file. Avoid using the firstName parameter in the affected file until the issue is resolved.

Exploit

Fix

XSS

Code Injection

Weakness Enumeration

CWE-79

CWE-94

Related Identifiers

CVE-2026-4849

Affected Products

Simple Laundry System

References · 8

• 🔥 https://github.com/kbloow/CVE/issues/2 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-4849 · Security Note
• https://twitter.com/CVEnew/status/2037137721626403203 · Twitter Post
• https://twitter.com/cyberbivash/status/2037106144217350377 · Twitter Post
• https://vuldb.com/?submit.776183 · Note
• https://vuldb.com/?id.353154 · Note
• https://vuldb.com/?ctiid.353154 · Note
• https://code-projects.org · Note