CVE-2025-1591

Name of the Vulnerable Software and Affected Versions SourceCodester Employee Management System version 1.0

Description A vulnerability was found in the Department Page component, specifically in the file /department.php. The issue arises from the manipulation of the Department Name argument, leading to cross-site scripting. This can be exploited remotely, affecting an unknown functionality of the file.

Recommendations For SourceCodester Employee Management System version 1.0, as a temporary workaround, consider restricting access to the /department.php file until a patch is available. Avoid using the Department Name argument in the affected Department Page component to minimize the risk of exploitation.