This vulnerability affects code-projects Simple Laundry System 1.0, specifically in the /modmemberinfo.php file's Parameter Handler component. An attacker can manipulate the userid parameter to inject malicious scripts, resulting in a cross-site scripting (XSS) vulnerability. The attack vector is network-based with no privileges required, but user interaction is necessary. The CVSS 4.0 score of 5.3 reflects a medium impact with low attack complexity and no required privileges. No official remediation or patch has been published as of the data provided.

Successful exploitation allows an attacker to execute arbitrary scripts in the context of the affected web application for users who interact with the manipulated userid parameter. This can lead to session hijacking, defacement, or other client-side impacts typical of XSS vulnerabilities. However, the vulnerability requires user interaction and does not allow direct system compromise or privilege escalation.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider applying input validation or output encoding on the userid parameter to mitigate XSS risks. Monitoring for updates from the vendor is recommended.