https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-11T01:09:56.393200+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-124570 CVE-2026-124570 — SourceCodester Online Leave Management System Employee Avatar Upload Extension Master.php cross site scripting 2026-11-11T01:09:56.394853+00:00

Affected: SourceCodester Online Leave Management System

A vulnerability was detected in SourceCodester Online Leave Management System 1.0. Affected is an unknown function of the file app/classes/Master.php of the component Employee Avatar Upload Extension. Performing a manipulation of the argument employee avatar filename results in cross site scripting. Remote exploitation of the attack is possible. The exploit is now public and may be used.