CVE-2025-29429

The Code-projects Online Class and Exam Scheduling System V1.0 is vulnerable to Cross-Site Scripting (XSS) in the /pages/program.php endpoint. The root cause is the lack of effective filtering and escaping of user-supplied data within the id, code, and name parameters. An attacker can exploit thi...