PT-2026-30597 · Code Projects · Online Shop Store

Jacky_159 · Published 2026-04-06 · Updated 2026-04-06 · CVE-2026-5647

Mitre

CVSS v3.1

2.4

Low

AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N

A vulnerability was detected in code-projects Online Shoe Store 1.0. This affects an unknown part of the file /admin/admin feature.php of the component Add Product Page. The manipulation of the argument product name results in cross site scripting. The attack may be launched remotely. The exploit is now public and may be used.

Exploit

Fix

Code Injection

XSS

Weakness Enumeration

CWE-94

CWE-79

Related Identifiers

CVE-2026-5647

Affected Products

Online Shop Store

References · 8

• 🔥 https://github.com/Jacky159/Pub_0323/issues/1 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-5647 · Security Note
• https://vuldb.com/vuln/355435 · Note
• https://code-projects.org · Note
• https://vuldb.com/submit/786171 · Note
• https://twitter.com/infoflowcloud/status/2041112612360835536 · Twitter Post
• https://twitter.com/CVEnew/status/2041112199918198905 · Twitter Post
• https://vuldb.com/vuln/355435/cti · Note