CVE-2026-38939

Cross Site Scripting vulnerability in andrewtch88 mvc-ecommerce v.1.0 allows a remote attacker to execute arbitrary code and obtain sensitive information via the productcatalogue.php component...

CVE-2026-38939

The andrewtch88 mvc-ecommerce v.1.0 software contains a Cross Site Scripting (XSS) vulnerability in the product_catalogue.php component. This flaw allows a remote attacker to execute arbitrary code and obtain sensitive information . While the vulnerability is identified as XSS, the description ex...

CVE-2026-38939: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability in andrewtch88 mvc-ecommerce v.1.0 allows a remote attacker to execute arbitrary code and obtain sensitive information via the productcatalogue.php component...