CVE-2026-5560 | PHPGurukul Online Shopping Portal Project 2.1 Parameter /payment-method.php paymethod sql injection

A vulnerability identified as critical has been detected in PHPGurukul Online Shopping Portal Project 2.1. The impacted element is an unknown function of the file /payment-method.php of the component Parameter Handler. Performing a manipulation of the argument paymethod results in sql injection.

This vulnerability is cataloged as CVE-2026-5560. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.