← Database

CVE-2026-38931

MEDIUM CVSS: 5.4 Published: 2026-05-27 Modified: 2026-07-05

Description

A stored cross-site scripting (XSS) vulnerability in the /admin/config-module.php component of creatorsofcode simplephp GitHub commit 5184cff (Latest as of 2026-02-27) via injecting a crafted payload.

Affected Platforms

Unknown

Weakness Type

CWE-79

References