CVE-2026-9448 in Employee Management System

सारांश

द्वारा MITRE • 26/05/2026

A vulnerability was determined in code-projects Employee Management System 1.0. This affects an unknown function of the file /applyleave.php. Executing a manipulation of the argument ID can lead to cross site scripting. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• जिम्मेदार: VulDB
• प्रकटीकरण: 26/05/2026
• संयम: स्वीकृत
• प्रविष्टि: VDB-365429
• CPE: तैयार
• CWE: CWE-79 (पुष्टि की गई)
• शोषण: डाउनलोड
• CVSS: 4.3 (VulDB)
• EPSS: 0.00035
• KEV: नहीं
• गतिविधियाँ: बहुत कम
• क्षेत्र: Energy, Education, ...

स्रोत

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-9448
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-9448
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-9448/