CVE-2025-5661: code-projects Traffic Offense Reporting System Setting save-settings.php cross site scripting

Published Jun 5, 2025

Updated

A vulnerability, which was classified as problematic, was found in code-projects Traffic Offense Reporting System 1.0. This affects an unknown part of the file /save-settings.php of the component Setting Handler. The manipulation of the argument sitename leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

Affected Software

2 affected components

Code-projects Traffic Offense Reporting System

Carmelo Traffic Offense Reporting System=1.0

Event History

Jun 5, 2025

CVE Published

via MITRE·01:31 PM

Data Sourced

via MITRE·01:31 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·02:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-5661?

CVE-2025-5661 is classified as a problematic vulnerability affecting the Traffic Offense Reporting System.

How do I fix CVE-2025-5661?

To fix CVE-2025-5661, validate and sanitize the input for the 'site_name' argument before processing it in the /save-settings.php file.

What type of vulnerability is CVE-2025-5661?

CVE-2025-5661 is a cross-site scripting (XSS) vulnerability.

Which component is vulnerable in CVE-2025-5661?

The vulnerability in CVE-2025-5661 affects the Setting Handler component of the Traffic Offense Reporting System.

Who is affected by CVE-2025-5661?

Users of the code-projects Traffic Offense Reporting System version 1.0 are affected by CVE-2025-5661.