CVE-2026-7095: code-projects Employee Management System edit.php cross site scripting
A vulnerability was identified in code-projects Employee Management System 1.0. This affects an unknown part of the file 370project/edit.php. The manipulation of the argument ID leads to cross site scripting. It is possible to initiate the attack remotely. The exploit is publicly available and might be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-7095?
CVE-2026-7095 has a medium severity rating due to the potential for cross-site scripting attacks.
How do I fix CVE-2026-7095?
To fix CVE-2026-7095, validate and sanitize all user inputs, especially the ID parameter in edit.php.
What impact does CVE-2026-7095 have on users?
CVE-2026-7095 can allow attackers to execute arbitrary scripts in users' browsers, potentially stealing credentials.
Which software is affected by CVE-2026-7095?
CVE-2026-7095 affects Code-projects Employee Management System version 1.0.
Is CVE-2026-7095 found in newer versions of the software?
CVE-2026-7095 is only reported in version 1.0 of the Code-projects Employee Management System, and later versions may have addressed it.