CVE-2025-51967

Summary: CVE-2025-51967 describes a reflected XSS in ProjectsAndPrograms School Management System 1.0. The vulnerability exists in the themeSet.php script where user input supplied to the theme POST parameter is not properly sanitized, enabling an attacker to inject arbitrary JavaScript executed ...