CVE-2026-19922

Name of the Vulnerable Software and Affected Versions code-projects Online Shopping System version 1.0

Description A security flaw exists in the /checkout.php endpoint. A remote attacker can perform cross site scripting (XSS)—a technique used to inject malicious scripts into web pages viewed by other users—by manipulating the amount 1 variable.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. Avoid using the amount 1 parameter in the /checkout.php endpoint until the issue is resolved.