github.comexploitrelated
https://github.com/jomskiller/Employee-Management-System---Stored-XSS CVE-2024-1010
LOW
SourceCodester Employee Management System edit-profile.php cross site scripting
Record summary
CVE-2024-1010 has a selected CVSS score of 3.5 (low).
Description
A vulnerability classified as problematic has been found in SourceCodester Employee Management System 1.0. This affects an unknown part of the file edit-profile.php. The manipulation of the argument fullname/phone/date of birth/address/date of appointment leads to cross site scripting. It is possible to initiate the attack remotely. The associated identifier of this vulnerability is VDB-252279.
Description source: CVE List
Exploitation context
CISA SSVC decision
ExploitationPoC
AutomatableNo
Technical impactPartial
CISA Coordinator · SSVC 2.0.3 · Evaluated May 8, 2025 · Source: CVE List
Affected products and versions
1| Product | Source | Version range | Status |
|---|---|---|---|
Employee Management SystemBrowse SourceCodester / Employee Management System | CVE List | 1.0 | affected |
References
4nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2024-1010 vuldb.comsignaturepermissions required
https://vuldb.com/?ctiid.252279 vuldb.comvdb entryTechnical description
https://vuldb.com/?id.252279