CVE-2023-36158

MediumCVSS 6.1

Published: 04/08/2023(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.62%

45th percentile - higher than 45% of all known CVEs

Summary

Cross Site Scripting (XSS) vulnerability in sourcecodester Toll Tax Management System 1.0 allows remote attackers to run arbitrary code via the First Name and Last Name fields on the My Account page.

Risk Assessment

An attacker can inject malicious scripts, leading to session hijacking, redirection to malicious sites, or theft of user data.

Recommendation

It is recommended to update the system to the latest version and implement input validation and encoding in form fields.

Original NVD description (English source)

Cross Site Scripting (XSS) vulnerability in sourcecodester Toll Tax Management System 1.0 allows remote attackers to run arbitrary code via the First Name and Last Name fields on the My Account page.