CVE-2025-1208

creationtimestamp| type| source ---|---|--- 2025-02-12 16:16:44+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhyl4b3win2a 2025-02-12 18:33:24+00:00| seen| https://t.me/cvedetector/17888 2025-02-21 15:03:13+00:00| seen|...

CVE-2025-1208

CVE-2025-1208 affects code-projects Wazifa System 1.0. The vulnerability stems from insufficient validation/escaping of user-supplied data in the postcontent parameter of /Profile.php, enabling cross-site scripting. Public exploitation has been reported; the attack can be remote and requires low ...