Vulnerability · Published Jan 26, 2026 · Assigned by VulDB

CVE-2026-1444iJason-Liu Books_Manager add_book_check.php cross site scripting

Low 2.4

In plain English

A low-severity cross-site scripting in Books_Manager from iJason-Liu. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 16% of all known vulnerabilities).

Severity (CVSS 3.1)2.4Low

Exploit odds (30 days)0.2%top 84.0% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

A vulnerability has been found in iJason-Liu Books_Manager up to 298ba736387ca37810466349af13a0fdf828e99c. This affects an unknown part of the file controllers/books_center/add_book_check.php. Such manipulation of the argument mark leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. This product does not use versioning. This is why information about affected and unaffected releases are unavailable.

Affected products (as reported)

Vendor	Product	Versions
iJason-Liu	Books_Manager	298ba736387ca37810466349af13a0fdf828e99c

Weakness: CWE-79, CWE-94 · Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N/E:P/RL:X/RC:R

References

VDB-342873 | iJason-Liu Books_Manager add_book_check.php cross site scripting vdb-entry, technical-description
VDB-342873 | CTI Indicators (IOB, IOC, TTP, IOA) signature, permissions-required
Submit #736968 | https://github.com/iJason-Liu/Books_Manager Books_Manager 1.0 Stored XSS third-party-advisory
https://blog.y1fan.work/2026/01/13/%E5%AD%98%E5%82%A8%E5%9E%8Bxss/ broken-link, exploit