CVE-2026-19209

Name of the Vulnerable Software and Affected Versions SourceCodester Photo Share Website version 1.0

Description A remote cross-site scripting issue exists in the /social/index.php?page=home endpoint. The flaw occurs when the Comment argument is manipulated, allowing an attacker to execute malicious scripts in the context of the user's browser.

Recommendations As a temporary mitigation, restrict or sanitize the input of the Comment argument in the /social/index.php?page=home endpoint. At the moment, there is no information about a newer version that contains a fix for this vulnerability.