CVE-2025-57117: Improper Neutralization of Input During Web Page Generation

A Clickjacking vulnerability exists in Rems' Employee Management System 1.0. This flaw allows remote attackers to execute arbitrary JavaScript on the department.php page by injecting a malicious payload into the Department Name field under Add Department...

CVE-2025-57117

A Clickjacking vulnerability exists in Rems' Employee Management System version 1.0 . The flaw resides on the department.php page, where a remote attacker can execute arbitrary JavaScript by injecting a malicious payload into the Department Name field under the "Add Department" section. Practical...

CVE-2025-29719: Improper Neutralization of Input During Web Page Generation

SourceCodester rems Employee Management System 1.0 is vulnerable to Cross Site Scripting XSS in addemployee.php via the First Name and Address text fields...