CVE-2026-81202

A flaw has been found in itsourcecode Payroll System 1.0. The impacted element is the function create/read/update/delete of the file ajax.php of the component CRUD Operation Handler. Executing a manipulation of the argument action can lead to missing authentication. The attack may be performed from remote. The exploit has been published and may be used.

Score

CVSS 3.1 7.3 High

Status

Deferred - cna@vuldb.com

Published

2026-08-26

Last modified

2026-08-27

Weaknesses

CWE-287, CWE-306

Affected products

• Payroll System (Itsourcecode)

References

• https://github.com/microwaveabi/vul/issues/7
• https://itsourcecode.com/
• https://vuldb.com/cve/CVE-2026-81202
• https://vuldb.com/submit/886151
• https://vuldb.com/submit/886152
• https://vuldb.com/vuln/395909
• https://vuldb.com/vuln/395909/cti