CVE-2023-36158

Cross Site Scripting (XSS) vulnerability in sourcecodester Toll Tax Management System 1.0 allows remote attackers to run arbitrary code via the First Name and Last Name fields on the My Account page.

CVSS v3.1

6.1 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS

0.80% chance of exploitation in the next 30 days, 54th percentile

Published

2023-08-03

Updated

2026-07-09

Proof-of-concept exploits (2)

• https://cyberredteam.tech/posts/cve-2023-36158/
• unknown00759/CVE-2023-361580★ · 2023-08-02

References

• CVE Record
• NVD entry

Related

• CVE-2023-36159
• CVE-2023-36146
• CVE-2023-36144
• CVE-2023-36163
• CVE-2023-36143
• CVE-2023-3617