CVE-2026-124570

A vulnerability was detected in SourceCodester Online Leave Management System 1.0. Affected is an unknown function of the file app/classes/Master.php of the component Employee Avatar Upload Extension. Performing a manipulation of the argument employee avatar filename results in cross site scripting. Remote exploitation of the attack is possible. The exploit is now public and may be used.

• CWE-79
• CWE-94

• https://github.com/cm126261/CVE/issues/1
• https://vuldb.com/cve/CVE-2026-124570
• https://vuldb.com/submit/1035914
• https://vuldb.com/vuln/432916
• https://vuldb.com/vuln/432916/cti
• https://www.sourcecodester.com/

Published

Nov 9, 2026

Last Modified

Nov 9, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-124565A security vulnerability has been detected in fushengqian fu…4.3
• CVE-2026-124566A vulnerability was detected in fushengqian fuint up to 36cc…4.3
• CVE-2026-124567A flaw has been found in fushengqian fuint up to 36cc31b08d7…4.3
• CVE-2026-124568A vulnerability has been found in fushengqian fuintCatering …4.3
• CVE-2026-124569A vulnerability was found in fushengqian fuintCatering up to…5.4
• CVE-2026-12457Inappropriate implementation in Extensions in Google Chrome …4.2
• CVE-2026-124571A flaw has been found in SourceCodester Simple CRUD using PH…6.3
• CVE-2026-124572A vulnerability has been found in DataLinkDC dinky up to 1.2…5.4
• CVE-2026-124573A vulnerability was found in logseq 2.0.1/2.0.2. This affect…7.3
• CVE-2026-124574A vulnerability was determined in chenyme grok2api up to 3.1…6.3
• CVE-2026-124575A vulnerability was identified in SiteServer SSCMS up to 7.1…3.7
• CVE-2026-124576A security flaw has been discovered in BeikeShop up to 2.0.0…7.3