CVEvulnerability
CVE-2023-36158
6.1 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2023-08-04
- Last modified
- 2026-07-09
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 6.1 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
- Weaknesses
- CWE-79
Description
Cross Site Scripting (XSS) vulnerability in sourcecodester Toll Tax Management System 1.0 allows remote attackers to run arbitrary code via the First Name and Last Name fields on the My Account page.
Affected configurations
• oretnom23 toll tax management system 1.0
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- https://cyberredteam.tech/posts/cve-2023-36158/ Exploit, Third Party Advisory
- https://github.com/unknown00759/CVE-2023-36158/blob/main/CVE-2023-36158.md Exploit, Third Party Advisory
- https://www.sourcecodester.com/php/15304/toll-tax-management-system-phpoop-free-source-code.html Product
- https://cyberredteam.tech/posts/cve-2023-36158/ Exploit, Third Party Advisory
- https://github.com/unknown00759/CVE-2023-36158/blob/main/CVE-2023-36158.md Exploit, Third Party Advisory
- https://www.sourcecodester.com/php/15304/toll-tax-management-system-phpoop-free-source-code.html Product