CVE-2026-9418: code-projects Employee Management System changepassemp.php cross site scripting
Published May 25, 2026
·Updated
A flaw has been found in code-projects Employee Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /changepassemp.php. Executing a manipulation of the argument ID can lead to cross site scripting. The attack may be performed from remote. The exploit has been published and may be used.
Affected Software
1 affected component
Code-projects Employee Management System=1.0
Event History
May 25, 2026
CVE Published
via MITRE·02:30 AM
Data Sourced
via MITRE·02:30 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2026-9418?
CVE-2026-9418 has a medium severity rating of 4.3.
2
What type of vulnerability is identified in CVE-2026-9418?
CVE-2026-9418 is identified as a cross site scripting (XSS) vulnerability.
3
What software is affected by CVE-2026-9418?
CVE-2026-9418 affects version 1.0 of the Code-projects Employee Management System.
4
How can CVE-2026-9418 be exploited?
CVE-2026-9418 can be exploited by manipulating the argument ID in the /changepassemp.php file.
5
What impact does CVE-2026-9418 have on the system?
CVE-2026-9418 may allow an attacker to execute cross site scripting attacks remotely.