Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2023-29397
HistoryApr 11, 2023 - 12:00 a.m.

Online Payroll System Cross-Site Scripting Vulnerability (CNVD-2023-29397)

2023-04-1100:00:00
China National Vulnerability Database
www.cnvd.org.cn
8
online payroll system
cross-site scripting
vulnerability
web scripts
html
injection

0.001 Low

EPSS

Percentile

48.3%

Online Payroll System is a system for distributing payroll online. A cross-site scripting vulnerability exists in Online Payroll System, which stems from the lack of effective filtering and escaping of user-supplied data in /admin/deduction_edit.php, and can be exploited by attackers to execute arbitrary Web scripts or HTML by injecting a crafted payload.

0.001 Low

EPSS

Percentile

48.3%

Related for CNVD-2023-29397