CVE-2026-5255
Last modified
CVE-2026-5255 is a medium-severity vulnerability rated 6.1/10 on the CVSS scale. A vulnerability was detected in code-projects Simple Laundry System 1.0. This affects an unknown part of the file /delstaffinfo.php of the component Parameter Handler. EPSS estimates a 0.27% chance of exploitation in the next 30 days.
Description
A vulnerability was detected in code-projects Simple Laundry System 1.0. This affects an unknown part of the file /delstaffinfo.php of the component Parameter Handler. The manipulation of the argument userid results in cross site scripting. The attack may be launched remotely. The exploit is now public and may be used.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Code-Projects | Simple Laundry System | 1.0 |
References
- https://code-projects.org/Product
- https://github.com/kunlan567-boop/test/issues/2Exploit, Issue Tracking, Mitigation, Third Party Advisory
- https://vuldb.com/submit/780617Third Party Advisory, VDB Entry
- https://vuldb.com/vuln/354445Third Party Advisory, VDB Entry
- https://vuldb.com/vuln/354445/ctiPermissions Required, VDB Entry
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2026-5255?
How severe is CVE-2026-5255?
How do I fix CVE-2026-5255?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-52520Emlog CMS <= 2.6.14 contains a stored cross-site scripting (…5.4
- CVE-2026-52521A SQL injection vulnerability in Z-BlogPHP 1.7.5 allows auth…8.1
- CVE-2026-5253A weakness has been identified in bufanyun HotGo 1.0/2.0. Af…3.5
- CVE-2026-52533An issue in D-Link DIR-1253 v.1.0.1.250923.142435 allows an …9.8
- CVE-2026-52539Outstatic CMS <= 2.1.9 contains a hardcoded JWT signing secr…9.1
- CVE-2026-5254A security vulnerability has been detected in welovemedia FF…3.5
- CVE-2026-5256A flaw has been found in code-projects Simple Laundry System…9.8
- CVE-2026-5257A vulnerability has been found in code-projects Simple Laund…9.8
- CVE-2026-5258A vulnerability was found in Sanster IOPaint 1.5.3. Impacted…7.3
- CVE-2026-52584Buffer Overflow vulnerability in libjxl v.0.11.2 and before …7.1
- CVE-2026-5259A vulnerability was determined in AutohomeCorp frostmourne u…6.3
- CVE-2026-5260A flaw was found in libgnutls. A remote attacker, by sending…8.2
Are you affected by CVE-2026-5255?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST