CVE-2026-7230

MEDIUM

SourceCodester Safety Anger Pad cross site scripting

Title source: cna

Description

A vulnerability was found in SourceCodester Safety Anger Pad 1.0. The affected element is an unknown function. The manipulation of the argument angerDisplay results in cross site scripting. The attack may be performed from remote. The exploit has been made public and could be used.

References (4)

[Vdb Entry, Technical Description] https://vuldb.com/vuln/359839

[Signature, Permissions Required] https://vuldb.com/vuln/359839/cti

[Third Party Advisory] https://vuldb.com/submit/802541

[Product] https://www.sourcecodester.com/

Scores

CVSS v3 4.3

EPSS 0.0003

EPSS Percentile 8.7%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-79 CWE-94

Status published

Products (1)

SourceCodester/Safety Anger Pad 1.0

Published Apr 28, 2026

Tracked Since Apr 28, 2026