CVE-2026-5825
published 2026-04-09CVE-2026-5825: A vulnerability was detected in code-projects Simple Laundry System 1.0. This vulnerability affects unknown code of the file /delmemberinfo.php. Performing a…
PriorityP423medium4.3CVSS 3.1
AVNACLPRNUIRSUCNILAN
EPSS
0.36%
28.3th percentile
A vulnerability was detected in code-projects Simple Laundry System 1.0. This vulnerability affects unknown code of the file /delmemberinfo.php. Performing a manipulation of the argument userid results in cross site scripting. The attack can be initiated remotely. The exploit is now public and may be used.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| code-projects | simple_laundry_system | — | — |
CVSS provenance
nvdv3.14.3MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
nvdv4.02.1LOWCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:N/I:P/A:N
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
code-projects Simple Laundry System 1.0 /delmemberinfo.php userid cross site scripting (EUVD-2026-20815 / CNNVD-202604-2170)
vuldb·2026-04-11·CVSS 5.3
CVE-2026-5825 [MEDIUM] code-projects Simple Laundry System 1.0 /delmemberinfo.php userid cross site scripting (EUVD-2026-20815 / CNNVD-202604-2170)
A vulnerability classified as problematic has been found in code-projects Simple Laundry System 1.0. This vulnerability affects unknown code of the file /delmemberinfo.php. Performing a manipulation of the argument userid results in cross site scripting.
This vulnerability is identified as CVE-2026-5825. The attack can be initiated remotely. Additionally, an exploit exists.
GHSA
GHSA-49pj-869r-v4q9: A vulnerability was detected in code-projects Simple Laundry System 1
ghsa_unreviewed·2026-04-09
CVE-2026-5825 [MEDIUM] CWE-79 GHSA-49pj-869r-v4q9: A vulnerability was detected in code-projects Simple Laundry System 1
A vulnerability was detected in code-projects Simple Laundry System 1.0. This vulnerability affects unknown code of the file /delmemberinfo.php. Performing a manipulation of the argument userid results in cross site scripting. The attack can be initiated remotely. The exploit is now public and may be used.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2026-04-09
Published