What is CVE-2026-82701?

CVE-2026-82701 is a high-severity vulnerability in Code-Projects Online Shopping System, classified under Improper Neutralization of Special Elements in Output Used by a Downstream Component (Injection). CVSS score: 7.3/10. Published 2026-08-31.

How severe is CVE-2026-82701?

High severity. CVSS v3 base score is 7.3 out of 10.

SQL Injection in Code-Projects Online Shopping System

CVE-2026-82701

A vulnerability was determined in code-projects Online Shopping System 1.0. Affected by this issue is some unknown functionality of the file /action.php of the component Search Functionality. This manipulation of the argument keyword causes sql injection. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized.

CVSS v3 metric

CVSS v3 base score 7.3 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L.

Affected products

Code-projects Online Shopping System — versions 1.0

Weakness classification (CWE)

References

cna@vuldb.com (technical-description, vdb-entry)
cna@vuldb.com (signature, permissions-required)
cna@vuldb.com (third-party-advisory)
cna@vuldb.com (third-party-advisory)
cna@vuldb.com (exploit)
cna@vuldb.com (product)

Frequently asked questions

What is CVE-2026-82701?: CVE-2026-82701 is a high-severity vulnerability in Code-Projects Online Shopping System, classified under Improper Neutralization of Special Elements in Output Used by a Downstream Component (Injection). CVSS score: 7.3/10. Published 2026-08-31.
How severe is CVE-2026-82701?: High severity. CVSS v3 base score is 7.3 out of 10.