A vulnerability was found in code-projects Online Product Reservation System 1.0. It has been classified as problematic. The affected element is an unknown function of the file handgunner-administrator/prod.php. Performing manipulation of the argument cat results in cross site scripting.
This vulnerability is reported as CVE-2026-0586. The attack is possible to be carried out remotely. Moreover, an exploit is present.
