CVE-2023-36159: ORETNOM23 Lost And Found Information System

Medium severity, CVSS 6.1. EPSS: 0.6% chance of exploitation in the next 30 days.

Cross Site Scripting (XSS) vulnerability in sourcecodester Lost and Found Information System 1.0 allows remote attackers to run arbitrary code via the First Name, Middle Name and Last Name fields on the Create User page.

Affected products

• ORETNOM23 Lost And Found Information System: version 1.0 only

Published 2023-08-04. Last modified 2026-07-09.