EUVD-2025-36107

🗓️ 27 Oct 2025 06:02:06Reported by EUVDType

XSS flaw in Expense Management System 1.0 affects the Currency Page create function and is remotely exploitable with public exploit.

Reporter	Title	Published	Views	Family All 8
Circl	CVE-2025-12230	27 Oct 202507:44	–	circl
CNNVD	Projectworlds Expense Management System 安全漏洞	27 Oct 202500:00	–	cnnvd
CVE	CVE-2025-12230	27 Oct 202506:02	–	cve
Cvelist	CVE-2025-12230 projectworlds Expense Management System Currency create cross site scripting	27 Oct 202506:02	–	cvelist
NVD	CVE-2025-12230	27 Oct 202506:15	–	nvd
Positive Technologies	PT-2025-43885	27 Oct 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-12230	28 Oct 202506:59	–	redhatcve
Vulnrichment	CVE-2025-12230 projectworlds Expense Management System Currency create cross site scripting	27 Oct 202506:02	–	vulnrichment

[
  {
    "enisaIdVendor": [
      {
        "id": "50245464-42fe-39b6-a39a-2e831a6bc29e",
        "vendor": {
          "name": "projectworlds"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "ad9df542-2ab8-329c-b2c5-3ae16f45290b",
        "product": {
          "name": "Expense Management System"
        },
        "product_version": "1.0"
      }
    ]
  }
]

Source	Link
vuldb	www.vuldb.com/
vuldb	www.vuldb.com/
vuldb	www.vuldb.com/
github	www.github.com/QIU-DIE/CVE/issues/11
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-12230

27 Oct 2025 15:15Current

3Low risk

Vulners AI Score3

CVSS 44.8

CVSS 3.12.4

CVSS 23.3

CVSS 32.4

EPSS0.00034

SSVC