CVE-2025-28121

CVE-2025-28121 affects code-projects Online Exam Mastering System 1.0. The vulnerability is a reflected Cross-Site Scripting (XSS) in feedback.php via the q parameter, where input is reflected without proper sanitization. Exploitation PoCs and public writeups (e.g., Exploit-DB, PacketStorm, GitHu...

CVE-2025-46173

CVE-2025-46173 is a stored XSS vulnerability in code-projects Online Exam Mastering System 1.0. The issue occurs in the feedback form’s name field and is triggered when an administrator views the feedback in the admin dashboard (dash.php), allowing injected scripts to execute in the admin’s brows...