CVE-2026-19998

Name of the Vulnerable Software and Affected Versions code-projects Online Shopping System version 1.0

Description A remote cross site scripting issue exists in the offersmail.php file. This occurs when the email argument is manipulated, allowing an attacker to execute malicious scripts in the victim's browser.

Recommendations As a temporary mitigation, restrict access to the offersmail.php file or avoid using the email argument until a fix is applied. At the moment, there is no information about a newer version that contains a fix for this vulnerability.