Is CVE-2026-19904 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-19904?

CVE-2026-19904 has a CVSS v3 severity of LOW (2.4).

Back

CVE-2026-19904

Description

A vulnerability was found in SourceCodester Online Book Store System 1.0. This vulnerability affects unknown code of the file /admin/index.php?page=site_settings of the component System Settings Module. The manipulation results in cross site scripting. The attack can be executed remotely. The exploit has been made public and could be used.