A vulnerability classified as critical was found in code-projects Simple Laundry System 1.0. This affects an unknown function of the file /checkcheckout.php of the component Parameter Handler. The manipulation of the argument serviceId results in sql injection.

This vulnerability is known as CVE-2026-4784. It is possible to launch the attack remotely. Furthermore, an exploit is available.