CVE-2026-7116 MEDIUM

CVE-2026-7116: code-projects Employee Management System mark.php cross site scripting

Vendor Code-Projects
Product Employee Management System
Weakness CWE-79 · XSS
Published April 27, 2026
Last update April 29, 2026

CVSS base score

5.3/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction
Confidentiality
Integrity

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P

What the vulnerability does

Description

A security flaw has been discovered in code-projects Employee Management System 1.0. This issue affects some unknown processing of the file 370project/mark.php. Performing a manipulation results in cross site scripting. Remote exploitation of the attack is possible. The exploit has been released to the public and may be used for attacks.

Key dates

Disclosure timeline

April 27, 2026 CVE published
April 29, 2026 Record updated