CVE-2025-28121

code-projects Online Exam Mastering System 1.0 is vulnerable to Cross Site Scripting XSS in feedback.php via the "q" parameter allowing remote attackers to execute arbitrary code...

📄 Online Exam Mastering System 1.0 Cross Site Scripting

Online Exam Mastering System version 1.0 suffers from a cross site scripting vulnerability. Exploit Title: code-projects Online Exam Mastering System 1.0 - Reflected Cross-Site Scripting XSS Google Dork: inurl:/exam/feedback.php Date: 2025-04-19 Exploit Author: Pruthu Raut Vendor Homepage:...

CVE-2025-28121

creationtimestamp| type| source ---|---|--- 2025-04-21 18:09:15+00:00| seen| https://t.me/cvedetector/23441 2025-04-23 21:02:26+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lnj3phda4s2h...

CVE-2025-28121

code-projects Online Exam Mastering System 1.0 is vulnerable to Cross Site Scripting XSS in feedback.php via the "q" parameter allowing remote attackers to execute arbitrary code...

CVE-2025-28121

code-projects Online Exam Mastering System 1.0 is vulnerable to Cross Site Scripting XSS in feedback.php via the "q" parameter allowing remote attackers to execute arbitrary code...

CVE-2025-28121

The code-projects Online Exam Mastering System 1.0 is vulnerable to a Reflected Cross-Site Scripting (XSS) vulnerability within the feedback.php file. The root cause is the application's failure to properly sanitize or encode user input provided via the "q" parameter , which allows remote attacke...