What is CVE-2026-5648?

CVE-2026-5648 is a high-severity vulnerability in Code-Projects Simple Laundry System, classified under Improper Neutralization of Special Elements in Output Used by a Downstream Component (Injection). CVSS score: 7.3/10. Published 2026-04-06.

How severe is CVE-2026-5648?

High severity. CVSS v3 base score is 7.3 out of 10.

SQL Injection in Code-Projects Simple Laundry System

CVE-2026-5648

A flaw has been found in code-projects Simple Laundry System 1.0. This vulnerability affects unknown code of the file /userfinishregister.php of the component Parameter Handler. This manipulation of the argument firstName causes sql injection. Remote exploitation of the attack is possible. The exploit has been published and may be used.

EPSS: 0.003 (17.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.3 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L.

Affected products

Code-projects Simple Laundry System — versions 1.0

Weakness classification (CWE)

References

cna@vuldb.com (technical-description, vdb-entry)
cna@vuldb.com (signature, permissions-required)
cna@vuldb.com (third-party-advisory)
cna@vuldb.com (issue-tracking, exploit)
cna@vuldb.com (product)

Frequently asked questions

What is CVE-2026-5648?: CVE-2026-5648 is a high-severity vulnerability in Code-Projects Simple Laundry System, classified under Improper Neutralization of Special Elements in Output Used by a Downstream Component (Injection). CVSS score: 7.3/10. Published 2026-04-06.
How severe is CVE-2026-5648?: High severity. CVSS v3 base score is 7.3 out of 10.