CVE-2025-60781

PHP Education Manager v1.0 is vulnerable to a Cross-Site Scripting (XSS) vulnerability within the worksheet.php file. The root cause is the insufficient validation of the participant_name parameter, which allows an attacker to inject malicious scripts into the application. Practical consequences ...

CVE-2025-60782

PHP Education Manager v1.0 is vulnerable to a stored Cross Site Scripting (XSS) in the topics.php module. The Title field used when creating or updating topics can inject malicious JavaScript, which can execute in affected users’ browsers. Affected product: PHP Education Manager v1.0; vulnerable ...