CVE-2022-40435

Employee Performance Evaluation System v1.0 was discovered to contain a persistent cross-site scripting (XSS) vulnerability via adding new entries under the Departments and Designations module.

Score
CVSS 3.1 4.8 Medium
Status
Modified - cve@mitre.org
Published
2022-12-19
Last modified
2026-07-09
Weaknesses
CWE-79

Affected products

References