CVE-2026-1444

LOW

iJason-Liu Books_Manager - Cross-Site Scripting via Mark Parameter in Add Book Check

Title source: llm
STIX 2.1

Description

A vulnerability has been found in iJason-Liu Books_Manager up to 298ba736387ca37810466349af13a0fdf828e99c. This affects an unknown part of the file controllers/books_center/add_book_check.php. Such manipulation of the argument mark leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. This product does not use versioning. This is why information about affected and unaffected releases are unavailable.

References (4)

Core 4
Core References
Permissions Required, VDB Entry vdb-entry technical-description
https://vuldb.com/?id.342873
Permissions Required, VDB Entry signature permissions-required
https://vuldb.com/?ctiid.342873
Permissions Required, VDB Entry third-party-advisory
https://vuldb.com/?submit.736968

Scores

CVSS v3 2.4
EPSS 0.0021
EPSS Percentile 10.6%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact partial

Details

CWE
CWE-79 CWE-94
Status published
Products (1)
iJason-Liu/Books_Manager 298ba736387ca37810466349af13a0fdf828e99c
Published Jan 26, 2026
Tracked Since Feb 18, 2026