CodeAstro Complaint Management System vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting CodeAstro Complaint Management System: 2 record(s), with affected versions and fixes.
CVE-2026-13558
Low · 3.5
CWE-79 Jun 29, 2026
CodeAstro Complaint Management System Report addreport cross site scripting
A security flaw has been discovered in CodeAstro Complaint Management System 1.0. This issue affects some unknown processing of the file /report/addreport of the component Report Handler. Performing a manipulation of the argument Report Title results in cross site scripting. Remote exploitation of the attack is possible. The exploit has been released to the public and may be used for attacks.
CVE-2026-13549
Medium · 5.4
CWE-285 Jun 29, 2026
CodeAstro Complaint Management System Report Endpoint Report.php deletereport authorization
A security flaw has been discovered in CodeAstro Complaint Management System 1.0. The affected element is the function deletereport of the file application/controllers/Report.php of the component Report Endpoint. The manipulation results in authorization bypass. The attack can be executed remotely. The exploit has been released to the public and may be used for attacks.