CVE-2026-78202

EUVD-2026-64741
A vulnerability was found in itsourcecode Payroll System 1.0. This affects the function save_settings of the file admin_class.php. The manipulation of the argument img results in unrestricted upload. The attack may be performed from remote. The exploit has been made public and could be used.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.3 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Awaiting analysis
This vulnerability is currently awaiting analysis.
Base Score
CVSS 3.x
EPSS Score
Percentile: 20.75%
Common Weakness Enumeration
References
https://github.com/microwaveabi/vul/issues/12
https://itsourcecode.com/
https://vuldb.com/cve/CVE-2026-78202
https://vuldb.com/submit/886159
https://vuldb.com/vuln/394579
https://vuldb.com/vuln/394579/cti