Dashboard / CVE-2026-5255

CVE-2026-5255

LOW
INFO Priority: 0.01 BB Relevance: 54/100
Published: 2026-04-01 Modified: 2026-10-26 First seen: 2026-10-29 Status: active

Attack Surface

Network Low Complexity No Auth

CVSS Vector Breakdown

AV: Network
AC: Low
PR: None
UI: Passive
S: X
AT: None
VC: None
VI: Low
VA: None

Description

A vulnerability was detected in code-projects Simple Laundry System 1.0. This affects an unknown part of the file /delstaffinfo.php of the component Parameter Handler. The manipulation of the argument userid results in cross site scripting. The attack may be launched remotely. The exploit is now public and may be used.

Weakness Classification (2)

Affected Software (1)

VendorProductVersion
code-projects simple_laundry_system 1.0

References & Advisories (5)

https://vuldb.com/submit/780617
Third Party Advisory VDB Entry
https://vuldb.com/vuln/354445
Third Party Advisory VDB Entry
https://vuldb.com/vuln/354445/cti
Permissions Required VDB Entry
https://github.com/kunlan567-boop/test/issues/2
Exploit Issue Tracking Mitigation

Bug Bounty Relevance

54 / 100
✓ Network accessible
✓ No authentication
✓ Low complexity

CVSS Score

2.1 / 10.0 v4.0
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

EPSS — Exploitation Probability

0.27%
Raw Score 0.002750
Percentile 19.9%
Date 2026-10-29

EPSS Trend

2026-10-29
0.00275
2026-10-28
0.00270

Intelligence Sources

nvd ref →

External Links