Itsourcecode Payroll Management System vulnerabilities
6 CVEs affecting Itsourcecode Payroll Management System, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-5319, published 2026-04-02.
More from Itsourcecode.
Highest priority
Known exploited (CISA KEV) first, then by EPSS exploit probability.
- CVE-2026-3993, published 2026-03-12. Medium severity, CVSS 4.3. EPSS: 0.5% chance of exploitation in the next 30 days. A security vulnerability has been detected in itsourcecode Payroll Management System 1.0. This vulnerability affects unknown code of the file /manage_employee_deductions.php. Such manipulation of the…
- CVE-2026-5319, published 2026-04-02. Medium severity, CVSS 4.3. EPSS: 0.4% chance of exploitation in the next 30 days. A security vulnerability has been detected in itsourcecode Payroll Management System up to 1.0. Affected is an unknown function of the file /navbar.php. Such manipulation of the argument page leads…
- CVE-2026-4877, published 2026-03-26. Medium severity, CVSS 4.3. EPSS: 0.4% chance of exploitation in the next 30 days. A security flaw has been discovered in itsourcecode Payroll Management System up to 1.0. This affects an unknown function of the file /index.php. Performing a manipulation of the argument page…
- CVE-2024-37831, published 2024-06-14. Critical severity, CVSS 9.8. EPSS: 0.4% chance of exploitation in the next 30 days. Itsourcecode Payroll Management System 1.0 is vulnerable to SQL Injection in payroll_items.php via the ID parameter.
- CVE-2026-5238, published 2026-04-01. High severity, CVSS 7.3. EPSS: 0.4% chance of exploitation in the next 30 days. A weakness has been identified in itsourcecode Payroll Management System 1.0. Affected by this issue is some unknown functionality of the file /view_employee.php of the component Parameter Handler.…
- CVE-2026-5237, published 2026-03-31. High severity, CVSS 7.3. EPSS: 0.4% chance of exploitation in the next 30 days. A security flaw has been discovered in itsourcecode Payroll Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /manage_user.php of the component Parameter…