medium5.4
CVE-2025-57117
A Clickjacking vulnerability exists in Rems' Employee Management System 1.0.
Impact
A Clickjacking vulnerability exists in Rems' Employee Management System 1.0. This flaw allows remote attackers to execute arbitrary JavaScript on the department.php page by injecting a malicious payload into the Department Name field under Add Department.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Remyandrade | Employee Management System | Version 1.0 |