A vulnerability described as problematic has been identified in code-projects Employee Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /changepassemp.php. Executing a manipulation of the argument ID can lead to cross site scripting.

This vulnerability appears as CVE-2026-9418. The attack may be performed from remote. In addition, an exploit is available.