Medium · 4.8 CVE-2025-44184 EUVD-2025-14936GHSA-fvmq-5x7q-w2cc

SourceCodester Best Employee Management System V1.0 is vulnerable to Cross Site Scripting (XSS) in /admin/profile.php via the website_image…

Published May 14, 2025 · Updated May 15, 2025 · Assigned by mitre

Description

SourceCodester Best Employee Management System V1.0 is vulnerable to Cross Site Scripting (XSS) in /admin/profile.php via the website_image, fname, lname, contact, username, and address parameters.

References

https://www.sourcecodester.com/php/17689/best-employee-management-system-php.html
https://github.com/cumakurt/CVE-SourceCodester-Best-Employee-Management-System-1.0/blob/main/CVE-2025-44184-SourceCodester-Best-Employee-Management-System-1.0-Stored%20XSS.md