CVE-2026-90795

Name of the Vulnerable Software and Affected Versions itsourcecode Loan Management System version 1.0

Description A cross site scripting issue exists in the navbar.php file. A remote attacker can execute the attack by manipulating the page argument, which allows the injection of malicious scripts into the web page.

Recommendations As a temporary mitigation, restrict or sanitize the input of the page argument in the navbar.php file. At the moment, there is no information about a newer version that contains a fix for this vulnerability.