Vulnerabilities

TI-2025-19273 CVE-2025-26258 · GHSA-h889-572v-9cfg

Sourcecodester Employee Management System v1.0 is vulnerable to Cross Site Scripting (XSS) via 'Add Designation.'

MEDIUM 60

Sourcecodester Employee Management System v1.0 is vulnerable to Cross Site Scripting (XSS) via 'Add Designation.'

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00202 Published 2025-09-26 No fix listed CWE-79

TI-2025-35448 CVE-2025-57117 · GHSA-f8wp-g7q2-59gh

A Clickjacking vulnerability exists in Rems' Employee Management System 1.0.

MEDIUM 58

A Clickjacking vulnerability exists in Rems' Employee Management System 1.0.

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.00345 Published 2025-09-15 No fix listed CWE-79

TI-2025-21170 CVE-2025-29719 · GHSA-frqg-qr33-mvr2

SourceCodester (rems) Employee Management System 1.0 is vulnerable to Cross Site…

MEDIUM 60

SourceCodester (rems) Employee Management System 1.0 is vulnerable to Cross Site Scripting (XSS) in add_employee.php via the First Name and Address text fields.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00298 Published 2025-04-02 No fix listed CWE-79

TI-2025-01650 CVE-2025-1905 · GHSA-m3mf-5vcm-ffxv

SourceCodester Employee Management System employee.php cross site scripting

MEDIUM 56

A vulnerability, which was classified as problematic, was found in SourceCodester Employee Management System 1.0.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00347 Published 2025-03-04 No fix listed CWE-79

TI-2025-00985 CVE-2025-1160 · GHSA-ggrr-27x3-83x5

SourceCodester Employee Management System index.php default credentials

LOW 38

A vulnerability was found in SourceCodester Employee Management System 1.0.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00934 Published 2025-02-10 No fix listed CWE-1392

Vulnerabilities

Filters

Sourcecodester Employee Management System v1.0 is vulnerable to Cross Site Scripting (XSS) via 'Add Designation.'

A Clickjacking vulnerability exists in Rems' Employee Management System 1.0.

SourceCodester (rems) Employee Management System 1.0 is vulnerable to Cross Site…

SourceCodester Employee Management System employee.php cross site scripting

SourceCodester Employee Management System index.php default credentials