CVE-2023-36158

MEDIUM

Sourcecodester Toll Tax Mgmt 1.0 - XSS

Title source: llm
STIX 2.1

Description

Cross Site Scripting (XSS) vulnerability in sourcecodester Toll Tax Management System 1.0 allows remote attackers to run arbitrary code via the First Name and Last Name fields on the My Account page.

Exploits (1)

nomisec WRITEUP
by unknown00759 · poc
https://github.com/unknown00759/CVE-2023-36158

References (4)

Core 4

Scores

CVSS v3 6.1
EPSS 0.0014
EPSS Percentile 34.3%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact partial

Details

CWE
CWE-79
Status published
Products (1)
oretnom23/toll_tax_management_system 1.0
Published Aug 04, 2023
Tracked Since Feb 18, 2026