CVE-2025-11512: code-projects Voting System voters_add.php cross site scripting
A vulnerability was found in code-projects Voting System 1.0. Affected by this issue is some unknown functionality of the file /admin/votersadd.php. The manipulation of the argument Firstname/Lastname/Platform results in cross site scripting. The attack can be executed remotely. The exploit has been made public and could be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-11512?
CVE-2025-11512 has a medium severity level due to its potential for cross site scripting attacks.
How do I fix CVE-2025-11512?
To fix CVE-2025-11512, ensure proper input validation and output encoding in the /admin/voters_add.php file.
What kind of attack can be executed due to CVE-2025-11512?
CVE-2025-11512 allows remote attackers to execute cross site scripting attacks.
Which file is affected by CVE-2025-11512?
CVE-2025-11512 affects the /admin/voters_add.php file of the code-projects Voting System.
Is CVE-2025-11512 easy to exploit?
Yes, CVE-2025-11512 can be easily exploited by manipulating the Firstname, Lastname, or Platform arguments.