Threats affecting pkg:github/kbloow/CVE

CVE-2026-4849 is a cross-site scripting (XSS) vulnerability in code-projects Simple Laundry System version 1.0. The issue exists in the /modify.php file within the Parameter Handler component, where the firstName argument can be manipulated to execute malicious scripts. The vulnerability can be exploited remotely and requires user interaction. No official patch or remediation guidance is currently provided by the vendor. The CVSS 4.0 base score is 5.3, indicating a medium severity level.