dext34-morgan CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

LOW dext34-morgan CVE published 2026-10-18

CVE-2026-111877

A vulnerability was determined in dext34-morgan Books4Cash up to a8d3e357db75c07ac5ffbadcbaee2aeb4db3e571. This affects an unknown part of the file search.php. Executing a manipulation of the argument Search can lead to cross site scripting. The attack may be performed from remote. The vulnerability allows for cross-site scripting attacks, which can lead to unauthorized actions on behalf of users. Defende [truncated]