CVE-2025-8933: 1000 Projects Sales Management System sales.php cross site scripting
A vulnerability was identified in 1000 Projects Sales Management System 1.0. This issue affects some unknown processing of the file /superstore/admin/sales.php. The manipulation of the argument ssalescat leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-8933?
CVE-2025-8933 is considered a high severity vulnerability due to its potential for remote exploitation through cross-site scripting.
What type of vulnerability is CVE-2025-8933?
CVE-2025-8933 is categorized as a cross-site scripting (XSS) vulnerability affecting the Sales Management System.
How can I fix CVE-2025-8933?
To fix CVE-2025-8933, validate and sanitize user input in the sales.php file to prevent XSS attacks.
Who is affected by CVE-2025-8933?
Users of the 1000 Projects Sales Management System version 1.0 are affected by CVE-2025-8933.
What are the potential impacts of CVE-2025-8933?
If exploited, CVE-2025-8933 can allow attackers to execute malicious scripts in the context of the victim's browser.