CVE-2025-29719
CVSS 3.1 Score 6.1 of 10 (medium)
Details
Published Apr 2, 2025
Updated: Apr 10, 2025
CWE ID 79
Summary
CVE-2025-29719: The SourceCodester Employee Management System version 1.0, specifically the add_employee.php file, harbors a Cross-Site Scripting (XSS) vulnerability. Attackers can exploit this weakness by injecting malicious scripts into the First Name and Address text fields, potentially stealing user data or gaining unauthorized access. This issue can lead to serious security consequences and should be addressed promptly through updates or patches provided by the vendor.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.