CVE-2025-51967

A Reflected Cross-site Scripting XSS vulnerability exists in the themeSet.php file of ProjectsAndPrograms School Management System 1.0. The application fails to sanitize user-supplied input in the theme POST parameter, allowing an attacker to inject and execute arbitrary JavaScript in a victim's...

CVE-2025-51967

A Reflected Cross-site Scripting XSS vulnerability exists in the themeSet.php file of ProjectsAndPrograms School Management System 1.0. The application fails to sanitize user-supplied input in the theme POST parameter, allowing an attacker to inject and execute arbitrary JavaScript in a victim's...

PT-2025-35084

Name of the Vulnerable Software and Affected Versions ProjectsAndPrograms School Management System version 1.0 Description A Reflected Cross-site Scripting XSS issue exists in the themeSet.php file. The application does not properly sanitize user-supplied input in the theme parameter, which allow...

CVE-2025-51967: Improper Neutralization of Input During Web Page Generation

A Reflected Cross-site Scripting XSS vulnerability exists in the themeSet.php file of ProjectsAndPrograms School Management System 1.0. The application fails to sanitize user-supplied input in the theme POST parameter, allowing an attacker to inject and execute arbitrary JavaScript in a victim's...