Sourcecodester Leave Application System vulnerabilities

3 CVEs affecting Sourcecodester Leave Application System, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-5326, published 2026-04-02.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2026-5326, published 2026-04-02. Medium severity, CVSS 5.3. EPSS: 0.5% chance of exploitation in the next 30 days. A vulnerability was identified in SourceCodester Leave Application System 1.0. Impacted is an unknown function of the file /index.php?page=manage_user of the component User Information Handler. Such…
CVE-2026-5210, published 2026-03-31. High severity, CVSS 7.3. EPSS: 0.5% chance of exploitation in the next 30 days. A vulnerability was detected in SourceCodester Leave Application System 1.0. This affects an unknown part. Performing a manipulation of the argument page results in file inclusion. Remote…
CVE-2026-5209, published 2026-03-31. Low severity, CVSS 2.4. EPSS: 0.4% chance of exploitation in the next 30 days. A security vulnerability has been detected in SourceCodester Leave Application System 1.0. Affected by this issue is some unknown functionality of the component User Management Handler. Such…