PT-2026-29678 · Itsourcecode · Payroll Management System

Lllyyy123 · Published 2026-04-02 · Updated 2026-04-02 · CVE-2026-5319

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions itsourcecode Payroll Management System versions prior to 1.1

Description A security issue exists in itsourcecode Payroll Management System. Manipulation of the page argument in the /navbar.php file can lead to cross-site scripting. The attack can be launched remotely. The exploit has been publicly disclosed.

Recommendations Update itsourcecode Payroll Management System to version 1.1 or later.

Exploit

Fix

XSS

Code Injection

Weakness Enumeration

CWE-79

CWE-94

Related Identifiers

CVE-2026-5319

Affected Products

Payroll Management System

References · 9

• 🔥 https://github.com/ltranquility/submit/issues/5 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-5319 · Security Note
• https://twitter.com/cyberbivash/status/2039573901764702699 · Twitter Post
• https://twitter.com/CVEarity/status/2039681728915370040 · Twitter Post
• https://vuldb.com/submit/778613 · Note
• https://vuldb.com/vuln/354651/cti · Note
• https://itsourcecode.com · Note
• https://vuldb.com/vuln/354651 · Note
• https://twitter.com/CVEnew/status/2039647716410863652 · Twitter Post