CVE-2025-25620

CVE-2025-25620 Unifiedtransform v2.0은 '과제 생성' 기능에서 저장형 크로스 사이트 스크립팅XSS 취약점이 있어, 공격자가 다른 사용자의 세션 컨텍스트에서 악성 스크립트를 실행할 수 있습니다. 공급업체: Unifiedtransform PoC 1단계: 교사로 애플리케이션에 로그인합니다. 2단계: 과제를 생성하고 XSS 페이로드가 포함된 PDF 파일을 업로드합니다. 3단계: Courses강좌 아래의 '과제 보기' 섹션으로 이동하여 업로드된 과제를 엽니다. 영향: 과제를 볼 때 악성 스크립트가 실행되어 ...

CVE-2025-25620

Unifiedtransform 2.0 is vulnerable to Cross Site Scripting XSS in the Create assignment function...

CVE-2025-25620

Unifiedtransform 2.0 is vulnerable to Cross Site Scripting XSS in the Create assignment function...

Unifiedtransform 跨站脚本漏洞

Unifiedtransform is an open source school management software from the individual developer Hasib Mahmud. A security vulnerability exists in Unifiedtransform version 2.0, which stems from a cross-site scripting vulnerability in the Create assignment function...

CVE-2025-25620

Unifiedtransform 2.0 is vulnerable to Cross Site Scripting XSS in the Create assignment function...

CVE-2025-25620

CVE-2025-25620 affects Unifiedtransform 2.0 with a Stored XSS vulnerability in the Create assignment function. The issue enables attacker-controlled scripts to run in other users’ sessions, with PoC details indicating a stored XSS path via assignment creation/uploaded content and impact described...

CVE-2025-25620

Unifiedtransform 2.0 is vulnerable to Cross Site Scripting XSS in the Create assignment function...

Exploit for Cross-site Scripting in Changeweb Unifiedtransform

CVE-2025-25620 Unifiedtransform v2.0 is vulnerable to Stored...

PT-2025-9871 · Unknown · Unifiedtransform

Name of the Vulnerable Software and Affected Versions: Unifiedtransform version 2.0 Description: The issue is related to Cross Site Scripting XSS in the Create assignment function, allowing attackers to execute malicious scripts in the context of other users. Recommendations: For Unifiedtransform...