CVE-2021-41645: ORETNOM23 Budget And Expense Tracker System

High severity, CVSS 8.8. EPSS: 3.2% chance of exploitation in the next 30 days.

Remote Code Execution (RCE) vulnerability exists in Sourcecodester Budget and Expense Tracker System 1.0 that allows a remote malicious user to inject arbitrary code via the image upload field. .

Affected products

• ORETNOM23 Budget And Expense Tracker System: version 1.0 only

Published 2021-10-29. Last modified 2026-06-17.