CVE-2026-3043 - Vulnerability Analysis

Overview

itsourcecode Event Management System 1.0 contains a reflected XSS caused by manipulation of the "page" argument in /admin/navbar.php, letting remote attackers execute scripts, exploit requires crafted request.

Severity & Score

Impact

Remote attackers can execute arbitrary scripts in users' browsers, potentially stealing session data or performing actions on behalf of users.

Mitigation

Update to the latest version.

References

• https://github.com/ltranquility/cve_submit/issues/2
• https://itsourcecode.com/
• https://vuldb.com/?ctiid.347399
• https://vuldb.com/?id.347399
• https://vuldb.com/?submit.757227

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner