VULNERABILITY INTELLIGENCE

CVE-2023-36158

CVSS score6.1 MEDIUM
EPSS probability0.80%
CISA KEVNot currently listed
Published2023-08-04
Last modified2026-07-09
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Description

Cross Site Scripting (XSS) vulnerability in sourcecodester Toll Tax Management System 1.0 allows remote attackers to run arbitrary code via the First Name and Last Name fields on the My Account page.

Weakness classification

  • nvd@nist.gov: CWE-79

Primary references