PT-2025-37996 · Code Projects · Human Resource Integrated System

Yulin Chen · Published 2025-09-16 · Updated 2025-09-20 · CVE-2025-56293

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions code-projects Human Resource Integrated System version 1.0

Description The Human Resource Integrated System is susceptible to Cross Site Scripting (XSS) attacks. This issue affects the Add Child Information section, specifically within the Childs Name field, and the Add Parent Information section, specifically within the Father Firstname field.

Recommendations As a mitigation, sanitize all user inputs in the Childs Name field within the Add Child Information section. As a mitigation, sanitize all user inputs in the Father Firstname field within the Add Parent Information section.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2025-56293

Affected Products

Human Resource Integrated System

References · 5

• 🔥 https://github.com/Chen1-Boop/CVE/blob/main/CVE-2025-56293.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-56293 · Security Note
• https://osv.dev/vulnerability/CVE-2025-56293 · Vendor Advisory
• https://twitter.com/CVEnew/status/1969291983404323057 · Twitter Post
• http://code-projects.com · Note