CVE-2026-16229: itsourcecode Courier Management System index.php cross site scripting
Published Jul 19, 2026
·Updated
A flaw has been found in itsourcecode Courier Management System up to 1.0. Affected by this vulnerability is an unknown functionality of the file /index.php. Executing a manipulation of the argument page can lead to cross site scripting. It is possible to launch the attack remotely. The exploit has been published and may be used.
Affected Software
1 affected component
itsourcecode Courier Management System<=1.0
Event History
Jul 19, 2026
CVE Published
via MITRE·09:45 AM
Data Sourced
via MITRE·09:45 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·10:16 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2026-16229?
CVE-2026-16229 has a medium severity rating of 4.3.
2
How does CVE-2026-16229 affect the itsourcecode Courier Management System?
CVE-2026-16229 allows for cross site scripting via manipulation of the 'page' argument in the /index.php file.
3
Can CVE-2026-16229 be exploited remotely?
Yes, CVE-2026-16229 can be exploited remotely.
4
What is the primary risk associated with CVE-2026-16229?
The primary risk of CVE-2026-16229 is the potential for cross site scripting attacks.
5
How can I mitigate CVE-2026-16229 in the itsourcecode Courier Management System?
Mitigation for CVE-2026-16229 involves sanitizing user input in the /index.php file to prevent cross site scripting.