Adding a check for owner in the donation function.

[KritikaJoshi22]

The donate function does not check if the msg.sender is the owner of the employee. This means that an attacker could send a donation to an employee that they do not own.