CVE-2026-9377

LOW

SourceCodester SUP Online Shopping productedit.php cross site scripting

Title source: cna
STIX 2.1

Description

A vulnerability was identified in SourceCodester SUP Online Shopping 1.0. The impacted element is an unknown function of the file /admin/productedit.php. The manipulation of the argument productName leads to cross site scripting. It is possible to initiate the attack remotely. The exploit is publicly available and might be used.

References (5)

Core 5
Core References
Vdb Entry, Technical Description vdb-entry technical-description
VDB-365340 | SourceCodester SUP Online Shopping productedit.php cross site scripting
https://vuldb.com/vuln/365340
Signature, Permissions Required signature permissions-required
VDB-365340 | CTI Indicators (IOB, IOC, TTP, IOA)
https://vuldb.com/vuln/365340/cti
Third Party Advisory third-party-advisory
Submit #813270 | sourcecodester SUP Online Shopping Project V1.0 Cross Site Scripting
https://vuldb.com/submit/813270

Scores

CVSS v3 2.4
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N/E:P/RL:X/RC:R

Details

CWE
CWE-79 CWE-94
Status published
Products (1)
SourceCodester/SUP Online Shopping 1.0
Published May 24, 2026
Tracked Since May 24, 2026