CVE-2026-1700

LOW

Projectworlds House Rental And Proper... - Code Injection

Title source: rule

Description

A weakness has been identified in projectworlds House Rental and Property Listing 1.0. This vulnerability affects unknown code of the file /app/sms.php. This manipulation of the argument Message causes cross site scripting. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be used for attacks.

References (4)

Scores

CVSS v3 3.5
EPSS 0.0001
EPSS Percentile 1.5%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N

Classification

CWE
CWE-94 CWE-79
Status published

Affected Products (1)

projectworlds/house_rental_and_property_listing_project

Timeline

Published Jan 30, 2026
Tracked Since Feb 18, 2026