PT-2026-29326

CVE-2026-5209

Publicado

2026-03-31

Atualizado

2026-07-24

Descrição por

CVSS 2.0

3.3

Baixa

MétricasAV:N/AC:L/Au:M/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions SourceCodester Leave Application System version 1.0

Description A security issue exists in the User Management Handler component of SourceCodester Leave Application System. This issue allows for cross site scripting, potentially enabling remote attacks. The details of the exploit have been publicly disclosed.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Explorabilidade

Exploit

Impactos

Pesquisadores

Hemant Raj Bhati

Hemantrajbhati5555

Fornecedores

Produtos afetados

Enumeração de fraquezas

CWE-94: Improper Control of Generation of Code (\'Code Injection\')

CWE-79: Improper Neutralization of Input During Web Page Generation (\'Cross-site Scripting\')