{"uuid": "2c7428d9-68ff-4d7d-baba-466f19c14189", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-16229", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mqyl5m2v2k25", "content": "Medium severity XSS (CVE-2026-16229) in itsourcecode Courier Management System v1.0 \u2014 abuse of 'page' parameter in /index.php. No patch yet. Mitigate with WAF rules & input validation. https://radar.offseq.com/threat/cve-2026-16229-cross-site-scripting-in-itsourcecode-courier-management-system-ed...", "creation_timestamp": "2026-07-19T10:30:26.793743Z"}