CVE-2026-19230
LowCVSS 3.5Exploitation Probability (EPSS)
Low risk10th percentile - higher than 10% of all known CVEs
Summary
A vulnerability in SourceCodester Photo Share Website 1.0 affects an unknown part of the file /social/ajax.php?action=save_upload of the Comment Input Box component. Manipulation of the content argument leads to cross site scripting. The attack may be initiated remotely, and the exploit is publicly available.
Risk Assessment
An attacker can inject malicious scripts that execute in the user's browser, potentially leading to session theft, account takeover, or other harmful actions.
Recommendation
Apply patches immediately or restrict access to the application. Also sanitize input in the content argument and implement XSS protection mechanisms.
Original NVD description (English source)
A vulnerability was identified in SourceCodester Photo Share Website 1.0. This affects an unknown part of the file /social/ajax.php?action=save_upload of the component Comment Input Box. The manipulation of the argument content leads to cross site scripting. The attack may be initiated remotely. The exploit is publicly available and might be used.