CVE-2026-5319: falha de média gravidade em itsourcecode Payroll Management System
itsourcecode Payroll Management System navbar.php cross site scripting
Publicada em
33Vexday Risk Score
Sem sinal de exploração. Ela tem prova de conceito pública.
ssvc Attendcvss 5.3epss 0.4%
probabilidade de exploração
0.4%top 63% das CVEs
exploração observada
nãonenhuma fonte reporta
1 exploit(s) público(s)
A security vulnerability has been detected in itsourcecode Payroll Management System up to 1.0. Affected is an unknown function of the file /navbar.php. Such manipulation of the argument page leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P
Produtos afetados
itsourcecode · Payroll Management SystemPoCs públicas encontradas — 1
cve_referencegithub.com/ltranquility/submit/issues/5não verificado⚠ Recursos públicos, para você avaliar a exposição de sistemas que controla ou está autorizado a testar. Teste apenas com autorização.
CVEs relacionadas — itsourcecode Payroll Management System
No mesmo produto, das mais perigosas para as menos.
CVE-2024-8567MEDIUMitsourcecode Payroll Management System ajax.php sql injectionEPSS 0.7%CVE-2024-5898MEDIUMitsourcecode Payroll Management System print_payroll.php sql injectionEPSS 0.6%CVE-2026-4223MEDIUMitsourcecode Payroll Management System manage_employee.php sql injectionEPSS 0.6%CVE-2024-8081MEDIUMitsourcecode Payroll Management System login.php sql injectionEPSS 0.6%CVE-2026-3812MEDIUMitsourcecode Payroll Management System manage_employee_allowances.php cross site scriptingEPSS 0.5%CVE-2026-3993MEDIUMitsourcecode Payroll Management System manage_employee_deductions.php cross site scriptingEPSS 0.5%