Cross-Site Scripting Vulnerability in Employee Management System by Code-Projects
CVE-2026-7116

5.3MEDIUM

Key Information:

Vendor: Code-projects
Status: Employee Management System
Vendor: CVE Published:; 27 April 2026

🔔 Create Code-projects Vulnerability Alert

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2026-7116?

A security flaw exists in the Employee Management System 1.0 developed by Code-Projects, specifically affecting the handling of the file 370project/mark.php. This vulnerability can lead to cross-site scripting (XSS) attacks, allowing remote attackers to manipulate content and execute scripts in the context of the user's browser. The exploit has been made publicly available, which increases the risk of real-world exploitation. Organizations using this software are encouraged to review the potential impact and take necessary precautions to mitigate risks.

Affected Version(s)

Employee Management System 1.0

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2026-7116 - Proof of Concept