CVE-2025-29427

Code-projects Online Class and Exam Scheduling System V1.0 is vulnerable to Cross Site Scripting XSS in profile.php via the memberfirst and memberlast parameters...

CVE-2025-29427

The Code-projects Online Class and Exam Scheduling System V1.0 is vulnerable to a Cross Site Scripting (XSS) attack within the profile.php file. The root cause is the lack of effective filtering and escaping of user-supplied data in the member_first and member_last parameters. This vulnerability ...