Best employee management system

This hub aggregates every CVE we track for Best employee management system, a product in the web cms plugins space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 13 most recently published vulnerabilities affecting Best employee management system.

• CVE-2026-19987SourceCodester Best Employee Management System Profile exposure of information through directory listing5.3Aug 17, 2026
• CVE-2025-44185SourceCodester Best Employee Management System V1.0 is vulnerable to Cross Site Request Forgery (CSRF) in /admin/change_pass.php via the password parameter.5.4May 15, 2025
• CVE-2025-44186SourceCodester Best Employee Management System 1.0 is vulnerable to Cross Site Request Forgery (CSRF) in /admin/Operation/User.php page.5.4May 14, 2025
• CVE-2025-44184SourceCodester Best Employee Management System V1.0 is vulnerable to Cross Site Scripting (XSS) in /admin/profile.php via the website_image, fname, lname, contact, username, and address parameters.4.8May 14, 2025
• CVE-2025-2046SourceCodester Best Employee Management System print1.php sql injection6.3Mar 6, 2025
• CVE-2025-1607SourceCodester Best Employee Management System salary_slip.php authorization4.3Feb 24, 2025
• CVE-2025-1606SourceCodester Best Employee Management System backups.php information disclosure4.3Feb 24, 2025
• CVE-2025-1593SourceCodester Best Employee Management System Profile Picture unrestricted upload4.7Feb 23, 2025
• CVE-2025-1592SourceCodester Best Employee Management System Add Role Page Role.php cross site scripting2.4Feb 23, 2025
• CVE-2025-0802SourceCodester Best Employee Management System Administrative Endpoint View_user.php access control7.3Jan 29, 2025
• CVE-2024-11214SourceCodester Best Employee Management System profile.php unrestricted upload4.7Nov 14, 2024
• CVE-2024-11213SourceCodester Best Employee Management System edit_role.php sql injection4.7Nov 14, 2024
• CVE-2024-11212SourceCodester Best Employee Management System fetch_product_details.php sql injection6.3Nov 14, 2024