← Database

CVE-2026-38940

MEDIUM CVSS: 6.1 Published: 2026-04-30 Modified: 2026-06-17

Description

Cross Site Scripting vulnerability in RafyMrX TOKO-ONLINE-ROTI v.1.0 allows a remote attacker to execute arbitrary code via the detail_produk.php component

Affected Platforms

Unknown

Weakness Type

CWE-79

References