CVE-2025-70152

The CVE affects code-projects Community Project Scholars Tracking System 1.0. The vulnerable components are the admin/user management endpoints /admin/save_user.php and /admin/update_user.php, where user-supplied POST fields (firstname, lastname, username, password, user_id) are concatenated into...