CVE:CVE-2020-35271
CNNVD:CNNVD-202101-1573
SourceCodester Employee Performance Evaluation System是美国SourceCodester公司的一个基于Php的用于员工绩效管理的建站系统。
Employee Performance Evaluation System 存在跨站脚本漏洞，该漏洞源于 PHP/MySQLi Employees的First Name和Last Name 字段。
solution:Upgrade employee_performance_evaluation_system_project employee_performance_evaluation_system to a higher version than 1.0,and avoid the version 1.0