What’s Vulnerable › Vulnerabilities

CVE-2023-36158

• Severity: medium (CVSS 6.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.8% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2023-08-04 · updated 2026-07-09
• Weakness: CWE-79

Description

Cross Site Scripting (XSS) vulnerability in sourcecodester Toll Tax Management System 1.0 allows remote attackers to run arbitrary code via the First Name and Last Name fields on the My Account page.

Affected products

• oretnom23 Toll Tax Management System: 1.0

References

• https://cyberredteam.tech/posts/cve-2023-36158/
• https://github.com/unknown00759/CVE-2023-36158/blob/main/CVE-2023-36158.md
• https://www.sourcecodester.com/php/15304/toll-tax-management-system-phpoop-free-source-code.html
• https://cyberredteam.tech/posts/cve-2023-36158/
• https://github.com/unknown00759/CVE-2023-36158/blob/main/CVE-2023-36158.md
• https://www.sourcecodester.com/php/15304/toll-tax-management-system-phpoop-free-source-code.html

Get alerted when CVE-2023-36158 or the next vulnerability affects your stack