CVE-2026-19904

LOW

CVE: CVE-2026-19904 - A vulnerability was found in SourceCodester Online Book Store System 1Sign in to save

CVSS

2.4

CVSS v3.1

EPSS

N/A

Exploit Prediction Score

Published

August 15, 2026

Exploitability

No EPSS data available

Description

A vulnerability was found in SourceCodester Online Book Store System 1.0. This vulnerability affects unknown code of the file /admin/index.php?page=site_settings of the component System Settings Module. The manipulation results in cross site scripting. The attack can be executed remotely. The exploit has been made public and could be used.

Weaknesses

CWE-79CWE-94

Affected Packages

No package data available.

Aliases

CVE-2026-19904

Related references

Publisher and database URLs for this record (shown for attribution; reading stays in Bugflare).

https://medium.com/@hemantrajbhati5555/stored-cross-site-scripting-xss-in-system-settings-module-fa4f99ed1544
https://vuldb.com/cve/CVE-2026-19904
https://vuldb.com/submit/870786
https://vuldb.com/vuln/390097
https://vuldb.com/vuln/390097/cti
https://www.sourcecodester.com/