CVE-2026-5255

CVE-2026-5255 affects code-projects Simple Laundry System 1.0, specifically an issue in the Parameter Handler’s delstaffinfo.php where manipulating the userid parameter triggers cross-site scripting. The vulnerability can be exploited remotely, and the exploit is public, indicating potential real...

CVE-2026-4849

CVE-2026-4849 affects code-projects Simple Laundry System 1.0. The vulnerability is in the /modify.php file within the Parameter Handler, where manipulating the firstName argument leads to cross-site scripting (XSS). The impact is described as Low integrity impact with no confidentiality or avail...