PT-2025-14547 · Sourcecodester · Sourcecodester Employee Management System

Xavier Bynum · Published 2025-04-02 · Updated 2025-04-02 · CVE-2025-29719

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions SourceCodester (rems) Employee Management System version 1.0

Description The issue concerns Cross Site Scripting (XSS) in the add employee.php file, specifically via the First Name and Address text fields. This allows for potential malicious script injection.

Recommendations For SourceCodester (rems) Employee Management System version 1.0, consider validating and sanitizing user input for the First Name and Address fields in the add employee.php file to prevent XSS attacks. As a temporary workaround, restrict access to the add employee.php file until a proper fix is implemented.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2025-29719

Affected Products

Sourcecodester Employee Management System

References · 6

• 🔥 https://github.com/sw8y/vulnerability_research/blob/main/CVE-2025-29719/CVE-2025-29719.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-29719 · Security Note
• https://osv.dev/vulnerability/CVE-2025-29719 · Vendor Advisory
• https://t.me/cvetracker/20623 · Telegram Post
• https://twitter.com/CVEnew/status/1907551275543306533 · Twitter Post
• https://sourcecodester.com/php/17847/employee-management-system-using-php-and-mysql-source-code.html · Note