Unrated severityNVD Advisory· Published Jun 29, 2026· Updated Jun 29, 2026
code-projects Online Music Site POST Request Feedback.php cross site scripting
CVE-2026-13567
Description
A security flaw has been discovered in code-projects Online Music Site 1.0. This affects an unknown part of the file /Frontend/Feedback.php of the component POST Request Handler. The manipulation of the argument fname/femail/faddress/fmessage results in cross site scripting. The attack may be launched remotely. The exploit has been released to the public and may be used for attacks.
Affected products
1- Range: = 1.0
Patches
Vulnerability mechanics
References
6- github.com/qwessec/CVE/issues/1mitreexploitissue-tracking
- vuldb.com/cve/CVE-2026-13567mitrethird-party-advisory
- vuldb.com/submit/844228mitrethird-party-advisory
- code-projects.orgmitreproduct
- vuldb.com/vuln/374575mitrevdb-entrytechnical-description
- vuldb.com/vuln/374575/ctimitresignaturepermissions-required
News mentions
0No linked articles in our index yet.