CVE:CVE-2022-40435
CNNVD:CNNVD-202212-3569
SourceCodester Employee Performance Evaluation System是美国SourceCodester公司的一个基于Php的用于员工绩效管理的建站系统。
Employee Performance Evaluation System v1.0存在安全漏洞，该漏洞源于其Departments and Designations模块允许攻击者在添加新条目时实现持久的跨站脚本。
solution:Upgrade employee_performance_evaluation_system_project employee_performance_evaluation_system to a higher version than 1.0,and avoid the version 1.0