CVE-2026-4877: falha de média gravidade em itsourcecode Payroll Management System
itsourcecode Payroll Management System index.php cross site scripting
Publicada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 5.3epss 0.3%
A security flaw has been discovered in itsourcecode Payroll Management System up to 1.0. This affects an unknown function of the file /index.php. Performing a manipulation of the argument page results in cross site scripting. It is possible to initiate the attack remotely. The exploit has been released to the public and may be used for attacks.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P
Produtos afetados
itsourcecode · Payroll Management SystemCVEs relacionadas — itsourcecode Payroll Management System
No mesmo produto, das mais perigosas para as menos.
CVE-2024-8567MEDIUMitsourcecode Payroll Management System ajax.php sql injectionEPSS 0.7%CVE-2024-5898MEDIUMitsourcecode Payroll Management System print_payroll.php sql injectionEPSS 0.6%CVE-2024-8081MEDIUMitsourcecode Payroll Management System login.php sql injectionEPSS 0.6%CVE-2026-4223MEDIUMitsourcecode Payroll Management System manage_employee.php sql injectionEPSS 0.5%CVE-2026-5319MEDIUMitsourcecode Payroll Management System navbar.php cross site scriptingEPSS 0.3%CVE-2026-3812MEDIUMitsourcecode Payroll Management System manage_employee_allowances.php cross site scriptingEPSS 0.3%