A vulnerability was found in code-projects Vehicle Showroom Management System 1.0. It has been declared as problematic. Impacted is an unknown function of the file /BranchManagement/ProfitAndLossReport.php. Executing a manipulation of the argument BRANCH_ID can lead to cross site scripting.
The identification of this vulnerability is CVE-2026-6034. The attack may be launched remotely. Furthermore, there is an exploit available.
