CVE-2026-112034 | aircheng-org iWebShop-5 up to 5.16 Login Redirect _userInfo.php IController::redirect callback (Issue 10)

October 18, 2026 Yanac

A vulnerability, which was classified as problematic, has been found in aircheng-org iWebShop-5 up to 5.16. The impacted element is the function IController::redirect of the file plugins/_userInfo/_userInfo.php of the component Login Redirect. This manipulation of the argument callback causes open redirect.

This vulnerability is handled as CVE-2026-112034. The attack can be initiated remotely. Additionally, an exploit exists.

The project was informed of the problem early through an issue report but has not responded yet.VulDB Recent EntriesRead More