CVE-2026-26464

Stored XSS in Society Management System Portal V1.0: the /admin/edit_user.php page accepts a name parameter via POST, which can store and execute arbitrary JavaScript when viewed by users (including admins). The provided documents describe the vulnerability and its vector but do not specify affec...