Is CVE-2026-16229 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-16229?

CVE-2026-16229 has a CVSS v3 severity of MEDIUM (4.3).

Back

CVE-2026-16229

Description

A flaw has been found in itsourcecode Courier Management System up to 1.0. Affected by this vulnerability is an unknown functionality of the file /index.php. Executing a manipulation of the argument page can lead to cross site scripting. It is possible to launch the attack remotely. The exploit has been published and may be used.