CVE-2025-12279: code-projects Client Details System welcome.php cross site scripting
Published Oct 27, 2025
·Updated
A vulnerability has been found in code-projects Client Details System 1.0. This vulnerability affects unknown code of the file /welcome.php. Such manipulation leads to cross site scripting. The attack may be performed from remote. The exploit has been disclosed to the public and may be used.
Affected Software
2 affected components
Code-projects Client Details System
Fabian Client Details System=1.0
Event History
Oct 27, 2025
CVE Published
via MITRE·01:02 PM
Data Sourced
via MITRE·01:02 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·01:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-12279?
The severity of CVE-2025-12279 is classified as high due to its potential for cross-site scripting attacks.
2
How do I fix CVE-2025-12279?
To fix CVE-2025-12279, you should sanitize and validate all user input in the /welcome.php file to prevent cross-site scripting.
3
What type of attack does CVE-2025-12279 allow?
CVE-2025-12279 allows for cross-site scripting attacks that can be executed remotely.
4
Which software is affected by CVE-2025-12279?
CVE-2025-12279 affects version 1.0 of the Code-projects Client Details System.
5
What file is vulnerable in CVE-2025-12279?
The vulnerable file in CVE-2025-12279 is /welcome.php.