A vulnerability has been found in code-projects Home Service System 1.0 and classified as problematic. The impacted element is an unknown function of the file /booking.php of the component Appointment Booking. The manipulation of the argument fname/lname leads to cross site scripting.
This vulnerability is listed as CVE-2026-7089. The attack may be initiated remotely. In addition, an exploit is available.
