PT-2026-24928 · Itsourcecode · Payroll Management System

Jiaxin Lin · Publicado 2026-03-12 · Atualizado 2026-03-12 · CVE-2026-3993

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions itsourcecode Payroll Management System version 1.0

Description A security issue has been identified in itsourcecode Payroll Management System 1.0. The issue affects unknown code within the /manage employee deductions.php file. Manipulation of the ID argument can lead to cross site scripting. The attack can be initiated remotely, and the exploit has been made publicly available.

API Endpoints /manage employee deductions.php

Vulnerable Parameters or Variables ID

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Code Injection

XSS

Enumeração de Fraquezas

CWE-94

CWE-79

Identificadores relacionados

CVE-2026-3993

Produtos afetados

Payroll Management System

Referências · 11

• 🔥 https://github.com/ltranquility/cve_submit/issues/11 · Exploit
• https://vuldb.com/?submit.769749 · Nota
• https://vuldb.com/?id.350475 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-3993 · Nota de Segurança
• https://twitter.com/CVEnew/status/2031992328148435056 · Publicação no Twitter
• https://itsourcecode.com · Nota
• https://t.me/cveNotify/155235 · Publicação no Telegram
• https://vuldb.com/?ctiid.350475 · Nota
• https://twitter.com/cyberbivash/status/2032013114913263774 · Publicação no Twitter
• https://twitter.com/CVEarity/status/2032092112171516020 · Publicação no Twitter
• https://t.me/CVEtracker/47235 · Publicação no Telegram