← Database

CVE-2025-26158

MEDIUM CVSS: 5.6 Published: 2025-02-14 Modified: 2026-06-17

Description

A Stored Cross-Site Scripting (XSS) vulnerability was discovered in the manage-employee.php page of Kashipara Online Attendance Management System V1.0. This vulnerability allows remote attackers to execute arbitrary scripts via the department parameter.

Affected Platforms

Kashipara Online Attendance Management System

Weakness Type

CWE-79

References