CVE-2026-78202: Itsourcecode Payroll System

High severity, CVSS 7.3. EPSS: 0.5% chance of exploitation in the next 30 days.

A vulnerability was found in itsourcecode Payroll System 1.0. This affects the function save_settings of the file admin_class.php. The manipulation of the argument img results in unrestricted upload. The attack may be performed from remote. The exploit has been made public and could be used.

Affected products

• Itsourcecode Payroll System: version 1.0 only

Published 2026-08-24. Last modified 2026-08-24.