CVE-2025-0538: code-projects Tourism Management System manage-pages.php cross site scripting
A vulnerability, which was classified as problematic, was found in code-projects Tourism Management System 1.0. Affected is an unknown function of the file /admin/manage-pages.php. The manipulation of the argument pgedetails leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-0538?
CVE-2025-0538 is classified as a problematic vulnerability.
What type of vulnerability is CVE-2025-0538?
CVE-2025-0538 is a Cross-Site Scripting (XSS) vulnerability affecting the manage-pages.php file.
How does CVE-2025-0538 affect users?
CVE-2025-0538 allows attackers to manipulate the pgedetails parameter, potentially leading to unauthorized script execution.
How do I fix CVE-2025-0538?
To fix CVE-2025-0538, ensure proper sanitization and validation of user inputs in the affected components.
Which software is affected by CVE-2025-0538?
CVE-2025-0538 affects the code-projects Tourism Management System version 1.0.