CVE-2025-0538: code-projects Tourism Management System manage-pages.php cross site scripting
First published: Fri Jan 17 2025(Updated: )
A vulnerability, which was classified as problematic, was found in code-projects Tourism Management System 1.0. Affected is an unknown function of the file /admin/manage-pages.php. The manipulation of the argument pgedetails leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Credit: cna@vuldb.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Tourism Management System | ||
| Fabianros Tourism Management System | =1.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2025-0538?
CVE-2025-0538 is classified as a problematic vulnerability.
What type of vulnerability is CVE-2025-0538?
CVE-2025-0538 is a Cross-Site Scripting (XSS) vulnerability affecting the manage-pages.php file.
How does CVE-2025-0538 affect users?
CVE-2025-0538 allows attackers to manipulate the pgedetails parameter, potentially leading to unauthorized script execution.
How do I fix CVE-2025-0538?
To fix CVE-2025-0538, ensure proper sanitization and validation of user inputs in the affected components.
Which software is affected by CVE-2025-0538?
CVE-2025-0538 affects the code-projects Tourism Management System version 1.0.
- agent/weakness
- agent/title
- agent/type
- agent/description
- agent/first-publish-date
- agent/author
- agent/source
- collector/mitre-cve
- source/MITRE
- agent/references
- collector/epss-latest
- source/FIRST
- agent/epss
- agent/last-modified-date
- agent/severity
- agent/event
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- agent/softwarecombine
- agent/tags
- collector/nvd-api
- source/NVD
- vendor/code-projects
- canonical/tourism management system
- vendor/fabianros
- canonical/fabianros tourism management system
- version/fabianros tourism management system/1.0