Priority MEDIUM 58
SourceCodester Best Employee Management System V1.0 is vulnerable to Cross Site Request Forgery (CSRF) in /admin/change_pass.php via the password parameter.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · No interaction · EPSS 0.00212 · Published 2025-05-15 · No fix listed CWE-352
Priority MEDIUM 58
SourceCodester Best Employee Management System 1.0 is vulnerable to Cross Site Request Forgery (CSRF) in /admin/Operation/User.php page.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · No interaction · EPSS 0.00172 · Published 2025-05-14 · No fix listed CWE-352
Priority MEDIUM 55
SourceCodester Best Employee Management System V1.0 is vulnerable to Cross Site Scripting (XSS) in /admin/profile.php via the website_image, fname, lname, contact, username, and address parameters.
CVSS 3.1MEDIUM 4.8· Network · High privileges · User interaction · EPSS 0.00275 · Published 2025-05-14 · No fix listed CWE-79
Priority MEDIUM 57
A vulnerability was found in SourceCodester Best Employee Management System 1.0 and classified as critical.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00477 · Published 2025-03-06 · No fix listed CWE-74
Priority MEDIUM 57
A vulnerability, which was classified as problematic, has been found in SourceCodester Best Employee Management System 1.0.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00621 · Published 2025-02-24 · No fix listed CWE-285
Priority MEDIUM 57
A vulnerability classified as problematic was found in SourceCodester Best Employee Management System 1.0.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00712 · Published 2025-02-24 · No fix listed CWE-200
Priority LOW 24
A vulnerability classified as critical has been found in SourceCodester Best Employee Management System 1.0.
CVSS 4.0MEDIUM 5.1· Network · High privileges · No interaction · EPSS 0.00538 · Published 2025-02-23 · No fix listed CWE-284
Priority LOW 22
A vulnerability was found in SourceCodester Best Employee Management System 1.0.
CVSS 4.0MEDIUM 4.8· Network · High privileges · User interaction · EPSS 0.00379 · Published 2025-02-23 · No fix listed CWE-79
Priority HIGH 70
A vulnerability classified as critical was found in SourceCodester Best Employee Management System 1.0.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00595 · Published 2025-01-29 · No fix listed CWE-266
Priority MEDIUM 56
A vulnerability has been found in SourceCodester Best Employee Management System 1.0 and classified as critical.
CVSS 4.0MEDIUM 5.1· Network · High privileges · No interaction · EPSS 0.00662 · Published 2024-11-14 · No fix listed CWE-284
Priority MEDIUM 56
A vulnerability, which was classified as critical, was found in SourceCodester Best Employee Management System 1.0.
CVSS 4.0MEDIUM 5.1· Network · High privileges · No interaction · EPSS 0.00539 · Published 2024-11-14 · No fix listed CWE-74
Priority MEDIUM 57
A vulnerability, which was classified as critical, has been found in SourceCodester Best Employee Management System 1.0.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00679 · Published 2024-11-14 · No fix listed CWE-74
THREATIST.IORead the docs