PT-2026-30414 · Code Projects · Simple Laundry System

Weining Xiao · Published 2026-04-05 · Updated 2026-04-05 · CVE-2026-5542

Mitre

CVSS v3.1

4.3

Medium

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

A vulnerability was determined in code-projects Simple Laundry System 1.0. Impacted is an unknown function of the file /modstaffinfo.php of the component Parameter Handler. Executing a manipulation of the argument userid can lead to cross site scripting. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized.

Exploit

Fix

XSS

Code Injection

Weakness Enumeration

CWE-79

CWE-94

Related Identifiers

CVE-2026-5542

Affected Products

Simple Laundry System

References · 6

• 🔥 https://github.com/boyslikesports/vul-web/issues/2 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-5542 · Security Note
• https://vuldb.com/vuln/355295/cti · Note
• https://vuldb.com/vuln/355295 · Note
• https://code-projects.org · Note
• https://vuldb.com/submit/782224 · Note