CVE-2026-111877

The dext34-morgan Books4Cash application (up to commit a8d3e357db75c07ac5ffbadcbaee2aeb4db3e571 ) is vulnerable to Cross-Site Scripting (XSS) . The flaw exists in an unspecified part of the search.php file, where a remote attacker can manipulate the Search argument to execute malicious scripts. T...

CVE-2026-111877 dext34-morgan Books4Cash search.php cross site scripting

A vulnerability was determined in dext34-morgan Books4Cash up to a8d3e357db75c07ac5ffbadcbaee2aeb4db3e571. This affects an unknown part of the file search.php. Executing a manipulation of the argument Search can lead to cross site scripting. The attack may be performed from remote. The exploit ha...

EUVD-2026-103388

A vulnerability was determined in dext34-morgan Books4Cash up to a8d3e357db75c07ac5ffbadcbaee2aeb4db3e571. This affects an unknown part of the file search.php. Executing a manipulation of the argument Search can lead to cross site scripting. The attack may be performed from remote. The exploit ha...