CVE 4.8 MEDIUM

Reflected Cross-Site Scripting (XSS) vulnerability in Human Resource Management System_CVE-2025-40686

4.8 / 10
MEDIUM
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N

Description

Reflected Cross-Site Scripting (XSS) in Human Resource Management System version 1.0. This vulnerability could allow an attacker to execute JavaScript code in the victim's browser by sending a malicious URL through theΒ 'employeeid' parameter in/detailview.php.

Basic Information

ID CVE-2025-40686
Source INCIBE
Published Jul 29, 2025 at 12:12
Modified Jul 29, 2025 at 13:28

Affected Product

Vendor Human Resource Management System
Product Human Resource Management System
Version 1.0
Affected Versions Human Resource Management System Human Resource Management System 1.0

CWE Classification

References

πŸ’­ Join the Security Discussion

πŸ”’ Your email address will not be published. Required fields are marked *

⚠️ Please be respectful and constructive in your comments. Security discussions should remain professional.