PT-2026-24928 · Itsourcecode · Payroll Management System

Jiaxin Lin · Published 2026-03-12 · Updated 2026-03-12 · CVE-2026-3993

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions itsourcecode Payroll Management System version 1.0

Description A security issue has been identified in itsourcecode Payroll Management System 1.0. The issue affects unknown code within the /manage employee deductions.php file. Manipulation of the ID argument can lead to cross site scripting. The attack can be initiated remotely, and the exploit has been made publicly available.

API Endpoints /manage employee deductions.php

Vulnerable Parameters or Variables ID

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Code Injection

XSS

Weakness Enumeration

CWE-94

CWE-79

Related Identifiers

CVE-2026-3993

Affected Products

Payroll Management System

References · 11

• 🔥 https://github.com/ltranquility/cve_submit/issues/11 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-3993 · Security Note
• https://vuldb.com/?submit.769749 · Note
• https://vuldb.com/?id.350475 · Note
• https://twitter.com/CVEnew/status/2031992328148435056 · Twitter Post
• https://itsourcecode.com · Note
• https://t.me/cveNotify/155235 · Telegram Post
• https://vuldb.com/?ctiid.350475 · Note
• https://twitter.com/cyberbivash/status/2032013114913263774 · Twitter Post
• https://twitter.com/CVEarity/status/2032092112171516020 · Twitter Post
• https://t.me/CVEtracker/47235 · Telegram Post