CVE-2025-29426

Code-projects Online Class and Exam Scheduling System V1.0 is vulnerable to Cross Site Scripting XSS in /pages/class.php via the id and cys parameters...

CVE-2025-29426

creationtimestamp| type| source ---|---|--- 2025-03-17 20:47:12+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/7856 2025-03-17 23:19:58+00:00| seen| https://t.me/cvedetector/20520 2025-03-18 00:01:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lkmegyysk...

CVE-2025-29426

The Code-projects Online Class and Exam Scheduling System V1.0 is vulnerable to Cross-Site Scripting (XSS) in the /pages/class.php endpoint. The root cause is the lack of effective filtering and escaping of user-supplied data within the id and cys parameters, allowing an attacker to inject and ex...