VULNERABILITY INTELLIGENCE

CVE-2025-40685

CVSS score6.1 MEDIUM

EPSS probability0.20%

CISA KEVNot currently listed

Published2025-07-29

Last modified2026-06-17

Description

Reflected Cross-Site Scripting (XSS) in Human Resource Management System version 1.0. This vulnerability could allow an attacker to execute JavaScript code in the victim's browser by sending a malicious URL through the 'searcstate' parameter in/state.php.