CVE-2026-15532
LowCVSS 2.4Exploitation Probability (EPSS)
Low risk11th percentile - higher than 11% of all known CVEs
Summary
A cross-site scripting vulnerability was found in SourceCodester Online Book Store System 1.0 in the User Management Module. Manipulation of the Name or Username arguments allows remote script execution. The exploit is publicly available.
Risk Assessment
An attacker can steal user sessions, redirect users to malicious sites, or perform other actions in their context, compromising data confidentiality and integrity.
Recommendation
Immediately update the system to the latest version or apply a security patch. Additionally, implement input validation and output encoding for all user-supplied data.
Original NVD description (English source)
A vulnerability was identified in SourceCodester Online Book Store System 1.0. This issue affects some unknown processing of the component User Management Module. Such manipulation of the argument Name/Username leads to cross site scripting. The attack can be executed remotely. The exploit is publicly available and might be used.