11 matches found
CVE-2025-25620
CVE-2025-25620 Unifiedtransform v2.0 is vulnerable to Stored Cross-Site Scripting XSS in the "Create Assignment" function, allowing attackers to execute malicious scripts in the context of other users' sessions. Vendor: Unifiedtransform PoC Step 1: Log in to the application as a Teacher. Step 2:...
CVE-2025-25620
Unifiedtransform 2.0 is vulnerable to Cross Site Scripting XSS in the Create assignment function...
CVE-2025-25620
Unifiedtransform 2.0 is vulnerable to Cross Site Scripting XSS in the Create assignment function...
CVE-2025-25620
Unifiedtransform v2.0 is vulnerable to a Stored Cross-Site Scripting (XSS) vulnerability within the Create assignment function. An attacker with Teacher privileges can exploit this by creating an assignment and uploading a PDF file containing a malicious XSS payload. When other users, such as tho...
CVE-2025-25620: Improper Neutralization of Input During Web Page Generation
Unifiedtransform 2.0 is vulnerable to Cross Site Scripting XSS in the Create assignment function...
CVE-2025-25620
Unifiedtransform 2.0 is vulnerable to Cross Site Scripting XSS in the Create assignment function...
Unifiedtransform Cross-Site Scripting Vulnerability
Unifiedtransform is an open source school management software from the individual developer Hasib Mahmud. A security vulnerability exists in Unifiedtransform version 2.0, which stems from a cross-site scripting vulnerability in the Create assignment function...
CVE-2025-25620
Unifiedtransform 2.0 is vulnerable to Cross Site Scripting XSS in the Create assignment function...
CVE-2025-25620
Unifiedtransform 2.0 is vulnerable to Cross Site Scripting XSS in the Create assignment function...
Exploit for Cross-site Scripting in Changeweb Unifiedtransform
CVE-2025-25620 Unifiedtransform v2.0 is vulnerable to Stored...
PT-2025-9871 · Unknown · Unifiedtransform
Name of the Vulnerable Software and Affected Versions: Unifiedtransform version 2.0 Description: The issue is related to Cross Site Scripting XSS in the Create assignment function, allowing attackers to execute malicious scripts in the context of other users. Recommendations: For Unifiedtransform...