PT-2026-21577 · Itsourcecode · Event Management System

Super_Luoqing · Publicado 2026-02-23 · Atualizado 2026-02-24 · CVE-2026-3043

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions itsourcecode Event Management System version 1.0

Description A cross site scripting issue exists in itsourcecode Event Management System version 1.0. The issue is located in the /admin/navbar.php file, within an unknown function. Manipulation of the page argument can trigger the issue, allowing for remote exploitation. The exploit has been published.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Code Injection

XSS

Enumeração de Fraquezas

CWE-94

CWE-79

Identificadores relacionados

CVE-2026-3043

Produtos afetados

Event Management System

Referências · 9

• 🔥 https://github.com/ltranquility/cve_submit/issues/2 · Exploit
• https://twitter.com/CVEarity/status/2026167748435628317 · Publicação no Twitter
• https://osv.dev/vulnerability/CVE-2026-3043 · Aviso do Fabricante
• https://vuldb.com/?ctiid.347399 · Nota
• https://vuldb.com/?submit.757227 · Nota
• https://twitter.com/CVEnew/status/2026184671386894732 · Publicação no Twitter
• https://itsourcecode.com · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-3043 · Nota de Segurança
• https://vuldb.com/?id.347399 · Nota