CVE-2026-3812
Last modified
CVE-2026-3812 is a medium-severity vulnerability rated 6.1/10 on the CVSS scale. A vulnerability was determined in itsourcecode Payroll Management System 1.0. Affected is an unknown function of the file /manage_employee_allowances.php. EPSS estimates a 0.27% chance of exploitation in the next 30 days.
Description
A vulnerability was determined in itsourcecode Payroll Management System 1.0. Affected is an unknown function of the file /manage_employee_allowances.php. This manipulation of the argument ID causes cross site scripting. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Angeljudesuarez | Payroll Management System | 1.0 |
References
- https://github.com/ltranquility/cve_submit/issues/10Exploit, Issue Tracking, Mitigation, Third Party Advisory
- https://itsourcecode.com/Product
- https://vuldb.com/?ctiid.349778Permissions Required, VDB Entry
- https://vuldb.com/?id.349778Third Party Advisory, VDB Entry
- https://vuldb.com/?submit.769103Third Party Advisory, VDB Entry
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2026-3812?
How severe is CVE-2026-3812?
How do I fix CVE-2026-3812?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-3807A security vulnerability has been detected in Tenda FH1202 1…8.8
- CVE-2026-38076An integer overflow in the jbig2_arith_iaid_ctx_new() functi…7.5
- CVE-2026-3808A vulnerability was detected in Tenda FH1202 1.2.0.14(408). …8.8
- CVE-2026-3809A flaw has been found in Tenda FH1202 1.2.0.14(408). The imp…8.8
- CVE-2026-3810A vulnerability has been found in Tenda FH1202 1.2.0.14(408)…8.8
- CVE-2026-3811A vulnerability was found in Tenda FH1202 1.2.0.14(408). Thi…8.8
- CVE-2026-3813A vulnerability was identified in opencc JFlow up to 5badc00…9.8
- CVE-2026-3814A security flaw has been discovered in UTT HiPER 810G up to …8.8
- CVE-2026-38142An unauthenticated command injection vulnerability in the /g…6.5
- CVE-2026-3815A weakness has been identified in UTT HiPER 810G up to 1.7.7…8.8
- CVE-2026-38158A SQL injection vulnerability in the /ureport/datasource/pre…9.8
- CVE-2026-3816A security vulnerability has been detected in OWASP DefectDo…6.5
Are you affected by CVE-2026-3812?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST