Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2023-29400
HistoryApr 11, 2023 - 12:00 a.m.

Online Payroll System Cross-Site Scripting Vulnerability

2023-04-1100:00:00
China National Vulnerability Database
www.cnvd.org.cn
18
online payroll system
cross-site scripting
vulnerability
employee edit
web scripts
html
data filtering
exploitation

EPSS

0.001

Percentile

48.3%

Online Payroll System is a system for distributing payroll online. A cross-site scripting vulnerability exists in Online Payroll System. The vulnerability stems from the lack of effective filtering and escaping of user-supplied data in /admin/employee_edit.php, which can be exploited to execute arbitrary web scripts or HTML by injecting a carefully crafted payload.

EPSS

0.001

Percentile

48.3%

Related for CNVD-2023-29400