PT-2026-21577 · Itsourcecode · Event Management System

Super_Luoqing · Published 2026-02-23 · Updated 2026-02-24 · CVE-2026-3043

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions itsourcecode Event Management System version 1.0

Description A cross site scripting issue exists in itsourcecode Event Management System version 1.0. The issue is located in the /admin/navbar.php file, within an unknown function. Manipulation of the page argument can trigger the issue, allowing for remote exploitation. The exploit has been published.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Code Injection

XSS

Weakness Enumeration

CWE-94

CWE-79

Related Identifiers

CVE-2026-3043

Affected Products

Event Management System

References · 9

• 🔥 https://github.com/ltranquility/cve_submit/issues/2 · Exploit
• https://osv.dev/vulnerability/CVE-2026-3043 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-3043 · Security Note
• https://twitter.com/CVEarity/status/2026167748435628317 · Twitter Post
• https://vuldb.com/?ctiid.347399 · Note
• https://vuldb.com/?submit.757227 · Note
• https://twitter.com/CVEnew/status/2026184671386894732 · Twitter Post
• https://itsourcecode.com · Note
• https://vuldb.com/?id.347399 · Note