CVE-2025-12280: code-projects Client Details System update-clients.php cross site scripting

Published Oct 27, 2025

Updated

A vulnerability was found in code-projects Client Details System 1.0. This issue affects some unknown processing of the file /update-clients.php. Performing manipulation results in cross site scripting. It is possible to initiate the attack remotely. The exploit has been made public and could be used.

Affected Software

2 affected components

Code-projects Client Details System

Fabian Client Details System=1.0

Event History

Oct 27, 2025

CVE Published

via MITRE·01:32 PM

Data Sourced

via MITRE·01:32 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·02:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-12280?

CVE-2025-12280 is considered a high severity vulnerability due to the potential for remote cross-site scripting attacks.

How do I fix CVE-2025-12280?

To fix CVE-2025-12280, sanitize and validate all user inputs in the /update-clients.php file to prevent XSS exploitation.

What type of attack is associated with CVE-2025-12280?

CVE-2025-12280 is associated with cross-site scripting (XSS) attacks that can be initiated remotely.

Which software is affected by CVE-2025-12280?

CVE-2025-12280 affects the Code-projects Client Details System version 1.0.

Can CVE-2025-12280 be exploited remotely?

Yes, CVE-2025-12280 can be exploited remotely, allowing attackers to execute malicious scripts in a user's browser.