A vulnerability was detected in SourceCodester Online Leave Management System 1.0.
A vulnerability was detected in SourceCodester Online Leave Management System 1.0. Affected is an unknown function of the file app/classes/Master.php of the component Employee Avatar Upload Extension. Performing a manipulation of the argument employee avatar filename results in cross site scripting. Remote exploitation of the attack is possible. The exploit is now public and may be used.
Read at NIST National Vulnerability Database (CVE API 2.0)
- Vendor
- SourceCodester
- Product
- Online Leave Management System
- CVSS v3.1
- 2.4 AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N
- Weakness
- CWE-79, CWE-94
- NVD status
- Deferred
Why it ranks 15 (Routine)
- No intrinsic risk signals yet; rank reflects source class and recency only.
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.