CVE-2025-29430

Code-projects Online Class and Exam Scheduling System V1.0 is vulnerable to Cross-Site Scripting (XSS) within the /pages/room.php endpoint. The root cause is the lack of effective filtering and escaping of user-supplied data in the id and rome parameters, which allows an attacker to inject and ex...