Security Advisory

CVE-2026-15559

6.3
MEDIUM

Vulnerability Description

A vulnerability was detected in CodeAstro Simple Online Leave Management System 1.0. This affects an unknown part of the file /SimpleOnlineLeave/admin/accept.php of the component POST Handler. Performing a manipulation of the argument appid results in sql injection. The attack is possible to be carried out remotely. The exploit is now public and may be used.
Published Date July 13, 2026
Official Source NIST NVD Advisory