Lucene search
China National Vulnerability DatabaseCNVD-2023-29399HistoryApr 11, 2023 - 12:00 a.m.
Online Payroll System Cross-Site Scripting Vulnerability (CNVD-2023-29399)
2023-04-1100:00:00
China National Vulnerability Database
www.cnvd.org.cn
7
online payroll
xss
vulnerability
employee add
web scripts
html
cnvd-2023-29399
0.001 Low
EPSS
Percentile
48.3%
Online Payroll System is a system for distributing payroll online. A cross-site scripting vulnerability exists in Online Payroll System. The vulnerability stems from the lack of effective filtering and escaping of user-supplied data in /admin/employee_add.php, which can be exploited to execute arbitrary Web scripts or HTML by injecting a carefully crafted payload.
| CPE | Name | Operator | Version |
|---|---|---|---|
| online payroll system online payroll system v | eq | 1.0 |
Related
prion
prion
Cross site scripting
2023-04-05 08:15:00
cve
cve
CVE-2023-1851
2023-04-05 08:15:07
nvd
nvd
CVE-2023-1851
2023-04-05 08:15:07
cvelist
cvelist