CVE-2026-4908 | code-projects Simple Laundry System 1.0 Parameter /modstaffinfo.php userid sql injection

A vulnerability was found in code-projects Simple Laundry System 1.0 and classified as critical. This affects an unknown function of the file /modstaffinfo.php of the component Parameter Handler. The manipulation of the argument userid results in sql injection.

This vulnerability was named CVE-2026-4908. The attack may be performed from remote. In addition, an exploit is available.