CVE-2025-11067: Projectworlds Visitor Management System Add Visitor myform.php cross site scripting
A vulnerability has been found in Projectworlds Visitor Management System 1.0. Affected is an unknown function of the file /myform.php of the component Add Visitor Page. The manipulation of the argument Name leads to cross site scripting. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-11067?
CVE-2025-11067 has a severity rating that indicates a moderate risk due to cross site scripting vulnerabilities.
How do I fix CVE-2025-11067?
To fix CVE-2025-11067, sanitize and validate all user inputs on the Add Visitor Page to prevent cross site scripting attacks.
What types of systems are affected by CVE-2025-11067?
CVE-2025-11067 affects the Projectworlds Visitor Management System version 1.0.
What is cross site scripting in the context of CVE-2025-11067?
In the context of CVE-2025-11067, cross site scripting allows attackers to inject malicious scripts through the Name argument on the Add Visitor Page.
Can CVE-2025-11067 be exploited remotely?
Yes, CVE-2025-11067 can be exploited remotely by attackers accessing the vulnerable page.