CVE-2026-111877

The dext34-morgan Books4Cash application (up to commit a8d3e357db75c07ac5ffbadcbaee2aeb4db3e571 ) is vulnerable to Cross-Site Scripting (XSS) . The flaw exists in an unspecified part of the search.php file, where a remote attacker can manipulate the Search argument to execute malicious scripts. T...