CVE-2026-16229
MEDIUM4.3CVSS v3
5.0CVSS v2
0.44%
EPSS (exploit probability)
CWE-79CWE
Description
A flaw has been found in itsourcecode Courier Management System up to 1.0. Affected by this vulnerability is an unknown functionality of the file /index.php. Executing a manipulation of the argument page can lead to cross site scripting. It is possible to launch the attack remotely. The exploit has been published and may be used.
CVSS v3 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Affected routers (0)
No routers currently mapped to this CVE in our database.