CVE-2025-11421: code-projects Voting System candidates_edit.php cross site scripting
A flaw has been found in code-projects Voting System 1.0. The affected element is an unknown function of the file /admin/candidatesedit.php. This manipulation of the argument Firstname/Lastname/Platform causes cross site scripting. Remote exploitation of the attack is possible. The exploit has been published and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-11421?
CVE-2025-11421 has been classified as a medium severity vulnerability due to its potential for remote exploitation through cross-site scripting.
How do I fix CVE-2025-11421?
To fix CVE-2025-11421, ensure that proper input validation and sanitization measures are implemented on the parameters involved in the vulnerable function.
Who is affected by CVE-2025-11421?
CVE-2025-11421 affects users of the Code-projects Voting System 1.0 where the admin editing functionality lacks sufficient security controls.
What type of attack does CVE-2025-11421 enable?
CVE-2025-11421 enables cross-site scripting (XSS) attacks that could allow an attacker to execute malicious scripts in the context of the user's browser.
Is remote exploitation possible with CVE-2025-11421?
Yes, remote exploitation is possible with CVE-2025-11421 as the vulnerability can be triggered without local access to the system.