CVE-2026-39112

Published April 20th, 2026

View on NVD ↗

CVSS v3

5.4

MEDIUM

CVSS v2

N/A

Affected

PROJECT

Description

Cross Site Scripting vulnerability in Apartment Visitors Management System Apartment Visitors Management System V1.1 in the visname parameter of visitors-form.php. An authenticated attacker can inject arbitrary JavaScript that is later executed when the malicious input is viewed in manage-newvisitors.php or visitor-detail.php.

efekaanakkar/Apartment-Visitors-Management-System-CVEs

Multiple CVEs affecting Apartment Visitors Management System v1.1, including SQL Injection and Stored XSS vulnerabilities with detailed analysis and proof-of-concept.

GitHub