PT-2026-43035 · Code Projects · Employee Management System

Ssl_Seven_Security_Lab_Wangzhiqiang_Zhanxiuchen · Published 2026-05-25 · Updated 2026-05-25 · CVE-2026-9448

Mitre

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

A vulnerability was determined in code-projects Employee Management System 1.0. This affects an unknown function of the file /applyleave.php. Executing a manipulation of the argument ID can lead to cross site scripting. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized.

Exploit

XSS

Code Injection

Weakness Enumeration

CWE-79

CWE-94

Related Identifiers

CVE-2026-9448

Affected Products

Employee Management System

References · 5

• 🔥 https://github.com/zzzxc643/CVE1/blob/main/EMPLOYEE_MANAGEMENT_SYSTEM/vul19.md · Exploit
• https://vuldb.com/vuln/365429/cti · Note
• https://vuldb.com/submit/813704 · Note
• https://vuldb.com/vuln/365429 · Note
• https://code-projects.org · Note