CVE-2025-63443

School Management System PHP v1.0 is vulnerable to Cross Site Scripting XSS in /login.php via the password parameter...

CVE-2025-63443

The School Management System PHP v1.0 , developed by Shubham kumar, is vulnerable to Cross Site Scripting (XSS) . The root cause is an unvalidated and unsanitized password parameter within the /login.php file. An attacker could exploit this to execute malicious scripts in a victim's browser. To r...