PT-2026-42995 · Code Projects · Employee Management System

Ssl_Seven_Security_Lab_Wangzhiqiang_Zhanxiuchen · Published 2026-05-25 · Updated 2026-05-25 · CVE-2026-9417

Mitre

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

A vulnerability was detected in code-projects Employee Management System 1.0. Affected is an unknown function of the file /myprofileup.php. Performing a manipulation of the argument ID results in cross site scripting. The attack is possible to be carried out remotely. The exploit is now public and may be used.

Exploit

Code Injection

XSS

Weakness Enumeration

CWE-94

CWE-79

Related Identifiers

CVE-2026-9417

Affected Products

Employee Management System

References · 5

• 🔥 https://github.com/zzzxc643/CVE1/blob/main/EMPLOYEE_MANAGEMENT_SYSTEM/vul14.md · Exploit
• https://code-projects.org · Note
• https://vuldb.com/submit/813699 · Note
• https://vuldb.com/vuln/365398 · Note
• https://vuldb.com/vuln/365398/cti · Note