CVE-2025-28121

code-projects Online Exam Mastering System 1.0 is vulnerable to Cross Site Scripting XSS in feedback.php via the "q" parameter allowing remote attackers to execute arbitrary code...

📄 Online Exam Mastering System 1.0 Cross Site Scripting

Online Exam Mastering System version 1.0 suffers from a cross site scripting vulnerability. Exploit Title: code-projects Online Exam Mastering System 1.0 - Reflected Cross-Site Scripting XSS Google Dork: inurl:/exam/feedback.php Date: 2025-04-19 Exploit Author: Pruthu Raut Vendor Homepage:...

CVE-2025-28121

creationtimestamp| type| source ---|---|--- 2025-04-21 18:09:15+00:00| seen| https://t.me/cvedetector/23441 2025-04-23 21:02:26+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lnj3phda4s2h...

CVE-2025-28121

code-projects Online Exam Mastering System 1.0 is vulnerable to Cross Site Scripting XSS in feedback.php via the "q" parameter allowing remote attackers to execute arbitrary code...

CVE-2025-28121

code-projects Online Exam Mastering System 1.0 is vulnerable to Cross Site Scripting XSS in feedback.php via the "q" parameter allowing remote attackers to execute arbitrary code...

CVE-2025-28121

CVE-2025-28121 affects code-projects Online Exam Mastering System 1.0. The vulnerability is a reflected Cross-Site Scripting (XSS) in feedback.php via the q parameter, where input is reflected without proper sanitization. Exploitation PoCs and public writeups (e.g., Exploit-DB, PacketStorm, GitHu...