CVE-2026-14695 SourceCodester Multi-Vendor Online Grocery Management System Registration Users.php save_client sql injection

A vulnerability was found in SourceCodester Multi-Vendor Online Grocery Management System 1.0. This affects the function saveclient of the file classes/Users.php of the component Registration Handler. The manipulation of the argument Name results in sql injection. It is possible to launch the...

Online Eyewear Shop Cross-Site Script Vulnerability

Online Eyewear Shop is an online eyewear store from the personal developer Carlo Montero. Online Eyewear Shop suffers from a cross-site scripting vulnerability that stems from the firstname/middlename/lastname/lastname/contact parameter of some functions on the oews/classes/Users.php page...