Employee Record Management System version 1.2 suffers from a persistent cross site scripting vulnerability.