CVE-2025-1592

Summary

CVE-2025-1592 is a newly identified vulnerability that impacts the Best Employee Management System 1.0 from SourceCodester. This issue has been assessed as problematic, and it affects an unspecified functionality within the /admin/Operations/Role.php component, specifically the Add Role Page. The vulnerability is triggered by the manipulation of the assign_name/description argument, resulting in cross-site scripting (XSS) attacks. These attacks can be executed remotely, posing a significant security risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.