CVE-2026-19922

Affects code-projects Online Shopping System 1.0; vulnerable component is the file /checkout.php. Manipulating the amount_1 parameter triggers cross-site scripting. Exploitation appears remotely viable; CVSS details in provided metrics show several vectors with a PROOF-OF-CONCEPT exploit maturity...