First published: Mon Mar 17 2025(Updated: )
Code-projects Online Class and Exam Scheduling System V1.0 is vulnerable to Cross Site Scripting (XSS) in /pages/class.php via the id and cys parameters.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Code-projects Online Class and Exam Scheduling System | ||
Code-projects Online Class and Exam Scheduling System | =1.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2025-29426 is classified as a high severity vulnerability due to its potential for exploitation through Cross Site Scripting (XSS).
To fix CVE-2025-29426, sanitize and validate user input for the id and cys parameters in the class.php file to prevent XSS attacks.
CVE-2025-29426 is a Cross Site Scripting (XSS) vulnerability affecting the Online Class and Exam Scheduling System.
CVE-2025-29426 affects Code-projects Online Class and Exam Scheduling System version 1.0.
CVE-2025-29426 can allow attackers to execute malicious scripts in the context of authenticated users, potentially compromising user data and security.