CVE-2026-3702

CWE-79 — Cross-site Scripting (XSS)CWE-94 — Code Injection3 documents3 sources
Severity
5.3MEDIUM
EPSS
0.0%
top 91.27%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Sourcecodester Loan Management SystemOretnom23 Loan Management System
Timeline
PublishedMar 8

Description

A vulnerability was detected in SourceCodester Loan Management System 1.0. Affected by this issue is some unknown functionality of the file /index.php. Performing a manipulation of the argument page results in cross site scripting. The attack is possible to be carried out remotely. The exploit is now public and may be used.

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N

Affected Packages2 packages

🔴Vulnerability Details

2
GHSA
GHSA-p7fh-2w6p-fwr9: A vulnerability was detected in SourceCodester Loan Management System 1↗2026-03-08
▶
CVEList
SourceCodester Loan Management System index.php cross site scripting↗2026-03-08
▶
CVE-2026-3702 (MEDIUM CVSS 5.3) | A vulnerability was detected in Sou | cvebase.io