NVD Vulnerability Detail
Search Exploit, PoC
CVE-2026-38931
Summary

A stored cross-site scripting (XSS) vulnerability in the /admin/config-module.php component of creatorsofcode simplephp GitHub commit 5184cff (Latest as of 2026-02-27) via injecting a crafted payload.

Publication Date May 28, 2026, 2:16 a.m.
Registration Date May 28, 2026, 4:14 a.m.
Last Update May 28, 2026, 2:16 a.m.
Related information, measures and tools
Common Vulnerabilities List