CVE-2025-8501: code-projects Human Resource Integrated System action.php cross site scripting
A vulnerability classified as problematic has been found in code-projects Human Resource Integrated System 1.0. Affected is an unknown function of the file /insert-and-view/action.php. The manipulation of the argument content leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-8501?
CVE-2025-8501 is classified as problematic due to its potential for cross-site scripting attacks.
How do I fix CVE-2025-8501?
To fix CVE-2025-8501, validate and sanitize all inputs, especially the 'content' argument in the 'insert-and-view/action.php' file.
What type of vulnerability is CVE-2025-8501?
CVE-2025-8501 is a cross-site scripting (XSS) vulnerability.
Which version of the Human Resource Integrated System is affected by CVE-2025-8501?
CVE-2025-8501 affects version 1.0 of the Human Resource Integrated System.
Where is CVE-2025-8501 located in the code?
CVE-2025-8501 is located in the file /insert-and-view/action.php.