VULNERABILITY INTELLIGENCE

CVE-2023-36159

CVSS score6.1 MEDIUM

EPSS probability0.35%

CISA KEVNot currently listed

Published2023-08-04

Last modified2026-07-09

Description

Cross Site Scripting (XSS) vulnerability in sourcecodester Lost and Found Information System 1.0 allows remote attackers to run arbitrary code via the First Name, Middle Name and Last Name fields on the Create User page.