CVE-2026-82700

Name of the Vulnerable Software and Affected Versions code-projects Online Shopping System version 1.0

Description A remote cross site scripting issue exists within the Newsletter Subscription component in the /offersmail.php file. The flaw allows an attacker to execute malicious scripts by manipulating the email argument. Cross site scripting is a technique where malicious scripts are injected into trusted websites.

Recommendations As a temporary workaround, restrict access to the /offersmail.php file or avoid using the email argument in that endpoint until a fix is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.