CyberRota
Back to database

CVE-2026-9414

LOW · CVSS 3.5 EPSS 0.25% Public Exploit

Source: NVD + CISA KEV + EPSS · Published: 2026-05-25 · Last synced: 2026-06-20

CyberRota Analysis

Uzaktan istismar edilebilir olabilir.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

Detected Signals
exploit
GitHub PoC Links

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-9414
Severity
LOW
CVSS
3.5
EPSS
0.25%

Original NVD Description

A security flaw has been discovered in SourceCodester Indian Invoicing System up to 0.x/1.0. The impacted element is an unknown function of the file /Invoicing/add_order.php of the component Invoice Template Render Database-Backed. The manipulation of the argument customer_name results in cross site scripting. The attack may be launched remotely. The exploit has been released to the public and may be used for attacks.