CVE-2026-6034
MEDIUM
NVD
CVSS Score
4.3
Severity
MEDIUM
Published
Apr 10, 2026
Vendor
unknown
Description
A flaw has been found in code-projects Vehicle Showroom Management System 1.0. Impacted is an unknown function of the file /BranchManagement/ProfitAndLossReport.php. Executing a manipulation of the argument BRANCH_ID can lead to cross site scripting. The attack may be launched remotely. The exploit has been published and may be used.