ORETNOM23 Expense Tracker vulnerabilities

3 CVEs affecting ORETNOM23 Expense Tracker, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-5286, published 2023-09-29.

More from ORETNOM23.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2023-5286, published 2023-09-29. Medium severity, CVSS 5.4. EPSS: 0.5% chance of exploitation in the next 30 days. A vulnerability, which was classified as problematic, has been found in SourceCodester Expense Tracker App v1. Affected by this issue is some unknown functionality of the file add_category.php of the…
• CVE-2022-45033, published 2022-12-15. Medium severity, CVSS 5.4. EPSS: 0.5% chance of exploitation in the next 30 days. A cross-site scripting (XSS) vulnerability in Expense Tracker 1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Chat text field.
• CVE-2023-44048, published 2023-09-27. Medium severity, CVSS 5.4. EPSS: 0.4% chance of exploitation in the next 30 days. Sourcecodester Expense Tracker App v1 is vulnerable to Cross Site Scripting (XSS) via add category.