CVE-2026-4835

creationtimestamp| type| source ---|---|--- 2026-03-26 06:28:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhwxynbsxv27...

CVE-2026-4835

The CVE covers code-projects Accounting System 1.0, where the argument costumer_name in /my_account/add_costumer.php can be manipulated to trigger cross-site scripting in the Web Application Interface. The vulnerability is exploitable remotely and the exploit is public. Impact is limited to low i...