Medium severity · published Jan 30, 2026
CVE-2026-1700
A weakness has been identified in projectworlds House Rental and Property Listing 1.0
5.4
CVSS
0.3%
EPSS
No
On KEV
Description
A weakness has been identified in projectworlds House Rental and Property Listing 1.0. This vulnerability affects unknown code of the file /app/sms.php. This manipulation of the argument Message causes cross site scripting. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be used for attacks.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
Required
Confidentiality
Low
Integrity
Low
Availability
None
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 18% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
HR
House Rental And Property Listing Project · Projectworlds
1.0 · source: NVD
Affected product
HR
House Rental And Property Listing Project
Projectworlds
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-1700
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-1700
Exploit
https://github.com/jiahao412/CVE/issues/3
Permissions Required
https://vuldb.com/?ctiid.343490
Third Party Advisory
https://vuldb.com/?id.343490
Third Party Advisory
https://vuldb.com/?submit.741977
More from House Rental And Property Listing Project
9.8
CVE-2026-0643
A flaw has been found in projectworlds House Rental and Property Listing 1.0
9.8
CVE-2020-24202
File Upload component in Projects World House Rental v1.0 suffers from an arbitrary file upload vulnerability with regular users, which allows remote attackers to conduct code…
6.1
CVE-2026-0642
A vulnerability was detected in projectworlds House Rental and Property Listing 1.0