CVE-2026-38940

TOKO-ONLINE-ROTI 1.0 - XSS

Title source: llm
STIX 2.1

Description

Cross Site Scripting vulnerability in RafyMrX TOKO-ONLINE-ROTI v.1.0 allows a remote attacker to execute arbitrary code via the detail_produk.php component

Scores

EPSS 0.0006
EPSS Percentile 17.1%

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact partial

Details

Status published
Published Apr 30, 2026
Tracked Since Apr 30, 2026