← Back to CVE search

CVE-2026-9417

code-projects Employee Management System

Description

A vulnerability was detected in code-projects Employee Management System 1.0. Affected is an unknown function of the file /myprofileup.php. Performing a manipulation of the argument ID results in cross site scripting. The attack is possible to be carried out remotely. The exploit is now public and may be used.

CVSS 4.3EPSS 0.263%Risk 0.44
View source
Published
2026-05-25 04:16:25
Affected versions
==1.0
Type
Web application
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N