CVE-2026-38940

· NIST NVD ↗

Cross Site Scripting vulnerability in RafyMrX TOKO-ONLINE-ROTI v.1.0 allows a remote attacker to execute arbitrary code via the detail_produk.php component

MEDIUM
CVSS severity
6.1
CVSS base score
2026-04-30
Published

CWE codes

CWE-79

Sources