CVE-2023-36158

Cross Site Scripting (XSS) vulnerability in sourcecodester Toll Tax Management System 1.0 allows remote attackers to run arbitrary code via the First Name and Last Name fields on the My Account page.

CVSS v3.1 NVD

6.1 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS

0.80% chance of exploitation in the next 30 days, 56th percentile

Published

2023-08-03

Updated

2026-07-09

Proof-of-concept exploits (2)

• https://cyberredteam.tech/posts/cve-2023-36158/
• unknown00759/CVE-2023-36158/blob/main/CVE-2023-36158.md

Security advisories

• https://cyberredteam.tech/posts/cve-2023-36158
• https://www.sourcecodester.com/php/15304/toll-tax-management-system-phpoop-free-source-co…

References

• CVE Record
• NVD entry