Skip to content
OpenAdvisories
Medium · 5.6 CVE-2025-26158 EUVD-2025-4150GHSA-xgr2-6f6r-9xqp

A Stored Cross-Site Scripting (XSS) vulnerability was discovered in the manage-employee.php page of Kashipara Online Attendance Management …

Published Feb 14, 2025 · Updated Feb 14, 2025 · Assigned by mitre

Description

A Stored Cross-Site Scripting (XSS) vulnerability was discovered in the manage-employee.php page of Kashipara Online Attendance Management System V1.0. This vulnerability allows remote attackers to execute arbitrary scripts via the department parameter.

References