Cross Site Scripting Vulnerability in Employee Management System by Code-Projects
CVE-2026-7095

5.3MEDIUM

Key Information:

Vendor: Code-projects
Status: Employee Management System
Vendor: CVE Published:; 27 April 2026

🔔 Create Code-projects Vulnerability Alert

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2026-7095?

A cross site scripting vulnerability has been discovered in the Employee Management System version 1.0 developed by Code-Projects. This vulnerability exists in the file located at 370project/edit.php, where the manipulation of the argument ID can be exploited. Attackers can initiate this remotely, making it crucial for users to address this risk. The exploit code is publicly available, raising the urgency for mitigation measures among users of this product.

Affected Version(s)

Employee Management System 1.0

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2026-7095 - Proof of Concept