CVE-2026-4626

CVE-2026-4626 affects the projectworlds Lawyer Management System 1.0. The vulnerability is a cross-site scripting (XSS) flaw triggered by manipulating the Description argument in the /lawyer_booking.php endpoint (also referred to as /lawyer booking.php in other sources). The issue is exploitable ...

Projectworlds Lawyer Management System 代码注入漏洞

The Projectworlds Lawyer Management System is an open-source lawyer management system developed by Projectworlds. Version 1.0 of the Projectworlds Lawyer Management System contains a code injection vulnerability. This vulnerability stems from incorrect handling of the parameter “Description” in t...