CVE-2025-26258 - Sourcecodester Employee Management System v1.0 is vulnerable to Cross Site Scripting (XSS) via 'Add Designation.'

MEDIUM

Sourcecodester Employee Management System v1.0 is vulnerable to Cross Site Scripting (XSS) via 'Add Designation.'

Published Sep 26, 2025

6.1

MEDIUM

CVSS 3.1

EPSS 0.20%

Sourcecodester Employee Management System v1.0 is vulnerable to Cross Site Scripting (XSS) via 'Add Designation.'

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-31368		Advisory
https://github.com/oye-ujjwal/CVEs/blob/main/Employee%20Management%20System%20App/CVE-2025-26258		Third Party Advisory
https://www.sourcecodester.com/php/17847/employee-management-system-using-php-and-mysql-source-code.html		Product