CVE-2026-1134

The vulnerability CVE-2026-1134 affects itsourcecode Society Management System (SMS) 1.0. The issue is a cross-site scripting (XSS) flaw in the admin/expenses.php file, caused by manipulation of the detail argument. Exploitation can be attempted remotely and publicly available exploit code exists...