CVE-2023-1852

CWE-79 — Cross-site Scripting (XSS)CWE-125 — Out-of-bounds Read4 documents4 sources
Severity
6.1MEDIUM
EPSS
0.3%
top 49.17%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Sourcecodester Online Payroll SystemOnline Payroll System Project Online Payroll System
Timeline
PublishedApr 5
Latest updateAug 23

Description

A vulnerability classified as problematic was found in SourceCodester Online Payroll System 1.0. This vulnerability affects unknown code of the file /admin/deduction_edit.php. The manipulation of the argument description leads to cross site scripting. The attack can be initiated remotely. The identifier of this vulnerability is VDB-224992.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:NExploitability: 2.1 | Impact: 1.4

Affected Packages2 packages

🔴Vulnerability Details

2
GHSA
GHSA-rpxj-qw8x-q3hf: A vulnerability classified as problematic was found in SourceCodester Online Payroll System 1↗2023-04-05
▶
CVEList
SourceCodester Online Payroll System deduction_edit.php cross site scripting↗2023-04-05
▶

📋Vendor Advisories

1
Red Hat
ghostscript: Incomplete fix for CVE-2020-16305↗2023-08-23
▶
CVE-2023-1852 (MEDIUM CVSS 6.1) | A vulnerability classified as probl | cvebase.io