CVE-2026-79793

Received Received - Intake

Online Shopping System 1.0 Cross Site Scripting via Success Parameter

Publication date: 2026-08-25

Last updated on: 2026-08-25

Assigner: VulDB

Description

A vulnerability has been found in code-projects Online Shopping System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/sumit_form.php. Such manipulation of the argument Success leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-25

Last Modified

2026-08-25

Generated

2026-08-26

AI Q&A

2026-08-26

EPSS Evaluated

N/A

NVD

CVE-2026-79793

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-79	The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
CWE-94	The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

Attack-Flow Graph

Executive Summary

This vulnerability is a cross-site scripting (XSS) issue in the Online Shopping System 1.0. It exists in the /admin/sumit_form.php file where the Success argument is manipulated, allowing malicious scripts to be executed in a user's browser.

Detection Guidance

This vulnerability is a reflected cross-site scripting (XSS) issue in the Online Shopping System 1.0, specifically in the /admin/sumit_form.php file where the Success argument is manipulated. To detect it, inspect web traffic for suspicious input in the Success parameter or monitor for unusual script execution in user inputs.

Impact Analysis

An attacker could exploit this to inject malicious scripts into web pages viewed by users. This may lead to theft of cookies, session tokens, or other sensitive data, or allow the attacker to perform actions on behalf of the user.

Compliance Impact

This XSS vulnerability could compromise user data confidentiality, potentially violating GDPR (data protection) and HIPAA (health information privacy) requirements for secure data handling and user consent.

Mitigation Strategies

Immediately update the Online Shopping System to the latest patched version. If no patch is available, sanitize user inputs in the Success parameter to prevent XSS attacks. Implement input validation and output encoding on the server side.

Hi! I’m here to help you understand CVE-2026-79793. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70