PT-2025-21602 · Code Projects · Employee Records System

Lontan0 · Published 2025-05-16 · Updated 2025-05-16 · CVE-2025-4744

Positive Technologies (AI Summary)

CVSS v3.1

4.6

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions: code-projects Employee Record System version 1.0

Description: A problematic issue has been found in the Employee Record System, affecting some unknown functionality of the file dashboardedit employee.php. The manipulation of the arguments employeed id, first name, middle name, and last name leads to cross-site scripting. The attack can be launched remotely.

Recommendations: For code-projects Employee Record System version 1.0, consider restricting access to the dashboardedit employee.php file until a patch is available. As a temporary workaround, avoid using the arguments employeed id, first name, middle name, and last name in the affected file to minimize the risk of exploitation.

Exploit

Fix

XSS

Code Injection

Weakness Enumeration

CWE-79

CWE-94

Related Identifiers

CVE-2025-4744

Affected Products

Employee Records System

References · 10

• 🔥 https://github.com/872323857/CVE/blob/main/employee-record-system-xss1.pdf · Exploit
• https://osv.dev/vulnerability/CVE-2025-4744 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-4744 · Security Note
• https://t.me/cvetracker/23983 · Telegram Post
• https://twitter.com/CVEnew/status/1923235051669487792 · Twitter Post
• https://t.me/cvenotify/122475 · Telegram Post
• https://vuldb.com/?submit.570965 · Note
• https://vuldb.com/?id.309044 · Note
• https://vuldb.com/?ctiid.309044 · Note
• https://code-projects.org · Note