CVE-2025-29719: XSS
SourceCodester (rems) Employee Management System 1.0 is vulnerable to Cross Site Scripting (XSS) in addemployee.php via the First Name and Address text fields.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-29719?
CVE-2025-29719 is classified as a medium severity vulnerability due to its potential for exploitation via Cross Site Scripting (XSS).
How do I fix CVE-2025-29719?
To fix CVE-2025-29719, sanitize and validate user input from the First Name and Address text fields in add_employee.php to prevent XSS attacks.
What type of vulnerability is CVE-2025-29719?
CVE-2025-29719 is a Cross Site Scripting (XSS) vulnerability affecting the Employee Management System.
Which component is affected by CVE-2025-29719?
CVE-2025-29719 specifically affects the add_employee.php component of the SourceCodester Employee Management System.
What should I do if I believe my system is vulnerable to CVE-2025-29719?
If you believe your system is vulnerable to CVE-2025-29719, review your code for proper input handling and implement appropriate XSS protections.