PT-2026-31573 · Code Projects · Online Shop Store

Christychen11 · Published 2026-04-09 · Updated 2026-04-09 · CVE-2026-5834

NVD

CVSS v2.0

3.3

Low

AV:N/AC:L/Au:M/C:N/I:P/A:N

A vulnerability was detected in code-projects Online Shoe Store 1.0. Affected is an unknown function of the file /admin/admin running.php. Performing a manipulation of the argument product name results in cross site scripting. It is possible to initiate the attack remotely. The exploit is now public and may be used.

Exploit

Fix

XSS

Code Injection

Weakness Enumeration

CWE-79

CWE-94

Related Identifiers

CVE-2026-5834

Affected Products

Online Shop Store

References · 8

• 🔥 https://github.com/lonelyuan/vunls/issues/5 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-5834 · Security Note
• https://vuldb.com/vuln/356290/cti · Note
• https://twitter.com/CVEnew/status/2042101277690040755 · Twitter Post
• https://vuldb.com/submit/788339 · Note
• https://code-projects.org · Note
• https://twitter.com/infoflowcloud/status/2042103213155922355 · Twitter Post
• https://vuldb.com/vuln/356290 · Note