Cross Site Scripting Vulnerability in Books4Cash by dext34-morgan
CVE-2026-111877

5.3MEDIUM

Key Information:

Vendor

Dext34-morgan

Status
Books4cash
Vendor
CVE Published:
18 October 2026

What is CVE-2026-111877?

A vulnerability has been identified in Books4Cash affecting the search.php file. By manipulating the Search argument, attackers can execute cross site scripting (XSS) attacks remotely. This issue has been publicly disclosed and poses a significant risk, particularly as the project has not been actively maintained for several years. Users of the affected versions should consider assessing their systems for potential exploitation and implement safeguards to mitigate risks.

Affected Version(s)

Books4Cash a8d3e357db75c07ac5ffbadcbaee2aeb4db3e571

References

https://vuldb.com/vuln/421589
vdb-entrytechnical-description
https://vuldb.com/vuln/421589/cti
signaturepermissions-required
https://vuldb.com/cve/CVE-2026-111877
third-party-advisory

CVSS V4

Score:
5.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

jinay-kothari (VulDB User)
VulDB CNA Team
.