← Database

CVE-2025-44184

MEDIUM CVSS: 4.8 Published: 2025-05-14 Modified: 2026-06-17

Description

SourceCodester Best Employee Management System V1.0 is vulnerable to Cross Site Scripting (XSS) in /admin/profile.php via the website_image, fname, lname, contact, username, and address parameters.

Affected Platforms

Mayurik Best Employee Management System

Weakness Type

CWE-79

References