CVE-2026-6035 | code-projects Vehicle Showroom Management System 1.0 ServiceAndSalesReport.php BRANCH_ID cross site scripting

A vulnerability was found in code-projects Vehicle Showroom Management System 1.0. It has been rated as problematic. The affected element is an unknown function of the file /BranchManagement/ServiceAndSalesReport.php. The manipulation of the argument BRANCH_ID leads to cross site scripting.

This vulnerability is referenced as CVE-2026-6035. Remote exploitation of the attack is possible. Furthermore, an exploit is available.