Vulnerability · Published Feb 23, 2025 · Assigned by VulDB
CVE-2025-1591SourceCodester Employee Management System Department Page department.php cross site scripting
Low 2.4
In plain English
A low-severity cross-site scripting in Employee Management System from SourceCodester. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 23% of all known vulnerabilities).
Official description
A vulnerability was found in SourceCodester Employee Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /department.php of the component Department Page. The manipulation of the argument Department Name leads to cross site scripting. The attack can be launched remotely.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| SourceCodester | Employee Management System | 1.0 |
Weakness: CWE-79, CWE-94 · Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N
References
- VDB-296575 | SourceCodester Employee Management System Department Page department.php cross site scripting vdb-entry, technical-description
- VDB-296575 | CTI Indicators (IOB, IOC, TTP, IOA) signature, permissions-required
- Submit #504048 | sourcecodester Employee Management System Using PHP and MySQL Submitted January 14 2025 Cross Site Scripting third-party-advisory
- https://www.sourcecodester.com/ product