CVE-2023-36158

Cross Site Scripting (XSS) vulnerability in sourcecodester Toll Tax Management System 1.0 allows remote attackers to run arbitrary code via the First Name and Last Name fields on the My Account page.
Cross-site Scripting
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
6.1 MEDIUM
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
mitreCNA
---
---
CVEADP
---
---
CISA-ADPADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 26%
VendorProductVersion
oretnom23toll_tax_management_system
1.0
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://toll.com
https://cyberredteam.tech/posts/cve-2023-36158/
https://github.com/unknown00759/CVE-2023-36158/blob/main/CVE-2023-36158.md
https://www.sourcecodester.com/php/15304/toll-tax-management-system-phpoop-free-source-code.html
http://toll.com
https://cyberredteam.tech/posts/cve-2023-36158/
https://github.com/unknown00759/CVE-2023-36158/blob/main/CVE-2023-36158.md
https://www.sourcecodester.com/php/15304/toll-tax-management-system-phpoop-free-source-code.html