Description
A stored cross-site scripting (XSS) vulnerability in the /admin/config-module.php component of creatorsofcode simplephp GitHub commit 5184cff (Latest as of 2026-02-27) via injecting a crafted payload.
Medium · 5.4
CVE-2026-38931
EUVD-2026-32697GHSA-wxvc-h8gm-x6h3
A stored cross-site scripting (XSS) vulnerability in the /admin/config-module.php component of creatorsofcode simplephp GitHub commit 5184c…
Published May 27, 2026 · Updated Jul 5, 2026 · Assigned by mitre