Description
A vulnerability was found in SourceCodester Best Employee Management System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /admin/Operations/Role.php of the component Add Role Page. The manipulation of the argument assign_name/description leads to cross site scripting. The attack may be launched remotely.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SourceCodester | Best Employee Management System | 1.0 | — |
References
- VDB-296576 | SourceCodester Best Employee Management System Add Role Page Role.php cross site scripting vdb-entry technical-description
- VDB-296576 | CTI Indicators (IOB, IOC, TTP, IOA) signature permissions-required
- Submit #505210 | SourceCodester Employee Management System Submitted November 3, 2024 - 02:56. Cross Site Scripting third-party-advisory
- https://www.sourcecodester.com/ product