CVE-2025-60781

PHP Education Manager v1.0 is vulnerable to a Cross-Site Scripting (XSS) vulnerability within the worksheet.php file. The root cause is the insufficient validation of the participant_name parameter, which allows an attacker to inject malicious scripts into the application. Practical consequences ...