CVE-2025-4745: code-projects Employee Record System current_employees.php cross site scripting

Published May 16, 2025

Updated

A vulnerability, which was classified as problematic, was found in code-projects Employee Record System 1.0. This affects an unknown part of the file currentemployees.php. The manipulation of the argument employeedid/firstname/middlename/lastname leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

Affected Software

2 affected components

Code-projects Employee Record System

Fabian Employee Record System=1.0

Event History

May 16, 2025

CVE Published

via MITRE·04:00 AM

Data Sourced

via MITRE·04:00 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·04:15 AM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2025-4745?

CVE-2025-4745 is classified as problematic, indicating a significant risk associated with the vulnerability.

How do I fix CVE-2025-4745?

To fix CVE-2025-4745, sanitize and validate user inputs for the parameters employeed_id, first_name, middle_name, and last_name in current_employees.php.

What kind of vulnerability is CVE-2025-4745?

CVE-2025-4745 is a cross-site scripting (XSS) vulnerability affecting the Employee Record System.

Which software is affected by CVE-2025-4745?

CVE-2025-4745 affects the code-projects Employee Record System version 1.0.

What are the consequences of CVE-2025-4745?

Exploitation of CVE-2025-4745 can lead to the execution of malicious scripts in the context of the user's browser, compromising user data.