CVE-2025-1190: code-projects Job Recruitment load_user-profile.php cross site scripting
A vulnerability has been found in code-projects Job Recruitment 1.0 and classified as problematic. This vulnerability affects unknown code of the file /parse/loaduser-profile.php. The manipulation leads to cross site scripting. The attack can be initiated remotely. Multiple parameters might be affected.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-1190?
CVE-2025-1190 has been classified as problematic due to its potential for cross site scripting exploits.
How do I fix CVE-2025-1190?
To fix CVE-2025-1190, ensure that input validation and output encoding are implemented in the affected file, /_parse/load_user-profile.php.
What types of attacks can be performed leveraging CVE-2025-1190?
Attacks leveraging CVE-2025-1190 can include cross site scripting, which may allow attackers to inject malicious scripts into web pages viewed by users.
Which software is affected by CVE-2025-1190?
CVE-2025-1190 specifically affects version 1.0 of the Code-Projects Job Recruitment software.
Can CVE-2025-1190 be exploited remotely?
Yes, CVE-2025-1190 can be exploited remotely, allowing attackers to manipulate the affected file without physical access.