CVE-2026-38931

A stored cross-site scripting XSS vulnerability in the /admin/config-module.php component of creatorsofcode simplephp GitHub commit 5184cff Latest as of 2026-02-27 via injecting a crafted payload...

CVE-2026-38931

A stored cross-site scripting XSS vulnerability in the /admin/config-module.php component of creatorsofcode simplephp GitHub commit 5184cff Latest as of 2026-02-27 via injecting a crafted payload...

CVE-2026-38931: Improper Neutralization of Input During Web Page Generation

A stored cross-site scripting XSS vulnerability in the /admin/config-module.php component of creatorsofcode simplephp GitHub commit 5184cff Latest as of 2026-02-27 via injecting a crafted payload...

CVE-2026-38931

A stored cross-site scripting XSS vulnerability in the /admin/config-module.php component of creatorsofcode simplephp GitHub commit 5184cff Latest as of 2026-02-27 via injecting a crafted payload...

PT-2026-44039

Name of the Vulnerable Software and Affected Versions creatorsofcode simplephp versions prior to GitHub commit 5184cff Description A stored cross-site scripting XSS issue exists in the '/admin/config-module.php' endpoint. This occurs when a crafted payload is injected, allowing the execution of...

CVE-2026-38931

A stored cross-site scripting (XSS) vulnerability exists in the /admin/config-module.php component of creatorsofcode simplephp (versions prior to GitHub commit 5184cff ). The flaw allows an attacker to inject a crafted payload , which can result in the execution of malicious scripts within the co...