CVE-2023-23022

6.1 mediumEPSS 0.5%

Medium (6.1) in oretnom23 employees payroll management system. EPSS 0.5% chance of exploitation in the next 30 days.

Cross site scripting (XSS) vulnerability in sourcecodester oretnom23 employee's payroll management system 1.0, allows attackers to execute arbitrary code via the code, title, from_date and to_date inputs in file Main.php.

Severity

CVSS 3.1

6.1 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 39% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2024-05-01
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

oretnom23:employees_payroll_management_system

References

https://gist.github.com/enferas/ffc4d8e38e238709a3dedf3002cb321d
https://gist.github.com/enferas/ffc4d8e38e238709a3dedf3002cb321d

Check your stack JSON