Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-13206 State: PUBLISHED Published: 2025-11-19T07:46:08.136Z Last Updated: 2025-11-19T18:02:01.615Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N) Vendors: stellarwp Products: GiveWP – Donation Plugin and Fundraising Platform Problem Types: CWE-79 Description: The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘name’ parameter in all versions up to, and including, 4.13.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected p
uthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Avatars must be enabled in the WordPress install in order to exploit the vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/95823720-e1dc-46c1-887b-ffd877b2fbe5?source=cve - https://plugins.trac.wordpress.org/browser/give/tags/4.11.0/templates/shortcode-donor-wall.php#L59 - https://plugins.trac.wordpress.org/browser/give/tags/4.11.0/includes/process-donation.php#L1230 - https://plugins.trac.wordpress.org/browser/give/tags/4.11.0/includes/class-give-donor.php#L1135 - https://plugins.t
30 - https://plugins.trac.wordpress.org/browser/give/tags/4.11.0/includes/class-give-donor.php#L1135 - https://plugins.trac.wordpress.org/changeset/3398128/
CVE ID: CVE-2025-13208 State: PUBLISHED Published: 2025-11-15T18:02:07.709Z Last Updated: 2025-11-17T16:01:49.033Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: FantasticLBP Products: Hotels Server Problem Types: CWE-89, CWE-74 Description: A security flaw has been discovered in FantasticLBP Hotels Server up to 67b44df162fab26df209bd5d5d542875fcbec1d0. The impacted element is an unknown function of the file controller/api/hotelList.php. The manipulation of the argument subjectId/cityName results in sql injection. The attack can be executed remotely. The exploit has been released to the public and may be exploited. This product implements a rolling release for
emotely. The exploit has been released to the public and may be exploited. This product implements a rolling release for ongoing delivery, which means version information for affected or updated releases is unavailable. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.332527 - https://vuldb.com/?ctiid.332527 - https://vuldb.com/?submit.685620 - https://vuldb.com/?submit.685622 - https://github.com/naixiao/CVE/issues/1 - https://github.com/naixiao/CVE/issues/2
CVE ID: CVE-2025-13209 State: PUBLISHED Published: 2025-11-15T18:32:06.823Z Last Updated: 2025-11-17T15:58:53.721Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: bestfeng Products: oa_git_free Problem Types: CWE-611, CWE-610 Description: A weakness has been identified in bestfeng oa_git_free up to 9.5. This affects the function updateWriteBack of the file yimioa-oa9.5\server\c-flow\src\main\java\com\cloudweb\oa\controller\WorkflowPredefineController.java. This manipulation of the argument writeProp causes xml external entity reference. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be exploited. A
tack is possible to be carried out remotely. The exploit has been made available to the public and could be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.332528 - https://vuldb.com/?ctiid.332528 - https://vuldb.com/?submit.685626 - https://github.com/bkglfpp/CVE-md/blob/main/%E4%BA%91%E7%BD%91%E5%8D%8F%E5%90%8C%E5%8A%9E%E5%85%AC%E7%B3%BB%E7%BB%9F/XXE.md
CVE ID: CVE-2025-13210 State: PUBLISHED Published: 2025-11-15T19:02:06.506Z Last Updated: 2025-11-17T15:56:31.660Z Severity: N/A (CVSS 5.8 AV:N/AC:L/Au:M/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: itsourcecode Products: Inventory Management System Problem Types: CWE-89, CWE-74 Description: A security vulnerability has been detected in itsourcecode Inventory Management System 1.0. This impacts an unknown function of the file /admin/products/index.php?view=add. Such manipulation of the argument PROMODEL leads to sql injection. The attack may be performed from remote. The exploit has been disclosed publicly and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://v
has been disclosed publicly and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.332529 - https://vuldb.com/?ctiid.332529 - https://vuldb.com/?submit.685702 - https://github.com/yihaofuweng/cve/issues/56 - https://itsourcecode.com/
CVE ID: CVE-2025-13216 State: REJECTED Published: N/A Last Updated: 2025-11-17T18:34:43.896Z Description: No description available.
CVE ID: CVE-2025-13221 State: PUBLISHED Published: 2025-11-15T19:32:05.663Z Last Updated: 2025-11-15T19:32:05.663Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:W/RC:R) Vendors: Intelbras Products: UnniTI Problem Types: CWE-256, CWE-255 Description: A weakness has been identified in Intelbras UnniTI 24.07.11. The affected element is an unknown function of the file /xml/sistema/usuarios.xml. Executing manipulation of the argument Usuario/Senha can lead to unprotected storage of credentials. The attack can be executed remotely. The exploit has been made available to the public and could be exploited. References: - https://vuldb.com/?id.332537 - https://vuldb.co
been made available to the public and could be exploited. References: - https://vuldb.com/?id.332537 - https://vuldb.com/?ctiid.332537 - https://vuldb.com/?submit.685825 - https://www.notion.so/eldruin/Intelbras-UnniTI-Plaintext-Admin-Credentials-Disclosure-29c27474cccb8008b2d7ea60affdf86e?source=copy_link
CVE ID: CVE-2025-13223 State: PUBLISHED Published: 2025-11-17T23:03:38.938Z Last Updated: 2025-11-20T04:55:20.770Z Vendors: Google Products: Chrome Description: Type Confusion in V8 in Google Chrome prior to 142.0.7444.175 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2025/11/stable-channel-update-for-desktop_17.html - https://issues.chromium.org/issues/460017370
CVE ID: CVE-2025-13224 State: PUBLISHED Published: 2025-11-17T23:03:39.401Z Last Updated: 2025-11-18T04:55:26.510Z Vendors: Google Products: Chrome Problem Types: CWE-843 Description: Type Confusion in V8 in Google Chrome prior to 142.0.7444.175 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2025/11/stable-channel-update-for-desktop_17.html - https://issues.chromium.org/issues/450328966
CVE ID: CVE-2025-13225 State: PUBLISHED Published: 2025-11-19T02:44:55.622Z Last Updated: 2025-11-19T18:48:30.818Z Severity: MEDIUM (CVSS 5.6 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:L) Vendors: Tanium Products: TanOS Description: Tanium addressed an arbitrary file deletion vulnerability in TanOS. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.tanium.com/TAN-2025-036
CVE ID: CVE-2025-13226 State: PUBLISHED Published: 2025-11-17T23:19:52.070Z Last Updated: 2025-11-18T04:55:30.639Z Vendors: Google Products: Chrome Problem Types: CWE-843 Description: Type Confusion in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2025/10/stable-channel-update-for-desktop_28.html - https://issues.chromium.org/issues/446113732
CVE ID: CVE-2025-13227 State: PUBLISHED Published: 2025-11-17T23:19:52.765Z Last Updated: 2025-11-18T04:55:29.939Z Vendors: Google Products: Chrome Problem Types: CWE-843 Description: Type Confusion in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2025/10/stable-channel-update-for-desktop_28.html - https://issues.chromium.org/issues/446122633
CVE ID: CVE-2025-13228 State: PUBLISHED Published: 2025-11-17T23:19:53.123Z Last Updated: 2025-11-18T04:55:29.124Z Vendors: Google Products: Chrome Problem Types: CWE-843 Description: Type Confusion in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2025/10/stable-channel-update-for-desktop_28.html - https://issues.chromium.org/issues/446124893
CVE ID: CVE-2025-13229 State: PUBLISHED Published: 2025-11-17T23:19:53.436Z Last Updated: 2025-11-18T04:55:28.431Z Vendors: Google Products: Chrome Problem Types: CWE-843 Description: Type Confusion in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2025/10/stable-channel-update-for-desktop_28.html - https://issues.chromium.org/issues/446113731
CVE ID: CVE-2025-13230 State: PUBLISHED Published: 2025-11-17T23:19:53.786Z Last Updated: 2025-11-18T04:55:27.563Z Vendors: Google Products: Chrome Problem Types: CWE-843 Description: Type Confusion in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2025/10/stable-channel-update-for-desktop_28.html - https://issues.chromium.org/issues/446124892
CVE ID: CVE-2025-13232 State: PUBLISHED Published: 2025-11-16T01:02:07.029Z Last Updated: 2025-11-17T15:38:57.019Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N/E:POC/RL:OF/RC:C) Vendors: n/a Products: projectsend Problem Types: CWE-79, CWE-94 Description: A flaw has been found in projectsend up to r1720. Impacted is an unknown function of the component File Editor/Custom Download Aliases. This manipulation causes cross site scripting. The attack is possible to be carried out remotely. The exploit has been published and may be used. Upgrading to version r1945 is recommended to address this issue. Patch name: 334da1ea39cb12f6b6e98dd2f80bb033e0c7b845. It is advisable to upgrade the affected
ded to address this issue. Patch name: 334da1ea39cb12f6b6e98dd2f80bb033e0c7b845. It is advisable to upgrade the affected component. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.332558 - https://vuldb.com/?ctiid.332558 - https://vuldb.com/?submit.686533 - https://github.com/projectsend/projectsend/pull/1450 - https://github.com/projectsend/projectsend/commit/334da1ea39cb12f6b6e98dd2f80bb033e0c7b845 - https://github.com/projectsend/projectsend/releases/tag/r1945
CVE ID: CVE-2025-13233 State: PUBLISHED Published: 2025-11-16T02:32:07.009Z Last Updated: 2025-11-17T15:35:30.465Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: itsourcecode Products: Inventory Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability has been found in itsourcecode Inventory Management System 1.0. The affected element is an unknown function of the file /index.php?q=single-item. Such manipulation of the argument ID leads to sql injection. The attack may be performed from remote. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id
ed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.332559 - https://vuldb.com/?ctiid.332559 - https://vuldb.com/?submit.686683 - https://github.com/3169417664/cve/issues/2 - https://itsourcecode.com/
CVE ID: CVE-2025-13234 State: PUBLISHED Published: 2025-11-16T03:02:06.655Z Last Updated: 2025-11-16T03:02:06.655Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: itsourcecode Products: Inventory Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in itsourcecode Inventory Management System 1.0. The impacted element is an unknown function of the file /index.php?q=product. Performing manipulation of the argument PROID results in sql injection. It is possible to initiate the attack remotely. The exploit has been made public and could be used. References: - https://vuldb.com/?id.332560 - https://vuldb.com/?ctiid.332560 - https://
n made public and could be used. References: - https://vuldb.com/?id.332560 - https://vuldb.com/?ctiid.332560 - https://vuldb.com/?submit.686698 - https://github.com/pip-in-head/lulucat-VD/issues/1 - https://itsourcecode.com/
CVE ID: CVE-2025-13235 State: PUBLISHED Published: 2025-11-16T03:32:06.363Z Last Updated: 2025-11-17T18:57:06.721Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: itsourcecode Products: Inventory Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was determined in itsourcecode Inventory Management System 1.0. This affects an unknown function of the file /admin/login.php. Executing manipulation of the argument user_email can lead to sql injection. It is possible to launch the attack remotely. The exploit has been publicly disclosed and may be utilized. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?i
cly disclosed and may be utilized. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.332561 - https://vuldb.com/?ctiid.332561 - https://vuldb.com/?submit.686701 - https://github.com/52914/cve/issues/1 - https://itsourcecode.com/
CVE ID: CVE-2025-13236 State: PUBLISHED Published: 2025-11-16T04:02:06.575Z Last Updated: 2025-11-17T18:58:17.152Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: itsourcecode Products: Inventory Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was identified in itsourcecode Inventory Management System 1.0. This impacts an unknown function of the file /admin/products/index.php?view=edit. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit is publicly available and might be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.332562 - htt
e and might be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.332562 - https://vuldb.com/?ctiid.332562 - https://vuldb.com/?submit.686702 - https://github.com/3169417664/cve/issues/3 - https://itsourcecode.com/
CVE ID: CVE-2025-13237 State: PUBLISHED Published: 2025-11-16T05:02:06.469Z Last Updated: 2025-11-17T18:59:36.030Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: itsourcecode Products: Inventory Management System Problem Types: CWE-89, CWE-74 Description: A security flaw has been discovered in itsourcecode Inventory Management System 1.0. Affected is an unknown function of the file /LogSignModal.PHP. The manipulation of the argument U_USERNAME results in sql injection. The attack can be launched remotely. The exploit has been released to the public and may be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.3325
public and may be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.332563 - https://vuldb.com/?ctiid.332563 - https://vuldb.com/?submit.686734 - https://github.com/yihaofuweng/cve/issues/57 - https://itsourcecode.com/
CVE ID: CVE-2025-13238 State: PUBLISHED Published: 2025-11-16T05:32:05.486Z Last Updated: 2025-11-17T19:00:34.257Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Bdtask Products: Flight Booking Software Problem Types: CWE-434, CWE-284 Description: A weakness has been identified in Bdtask Flight Booking Software 4. Affected by this vulnerability is an unknown functionality of the file /agent/profile/edit of the component Edit Profile Page. This manipulation causes unrestricted upload. The attack may be initiated remotely. The exploit has been made available to the public and could be exploited. The vendor was contacted early about this disclosure but did not re
made available to the public and could be exploited. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.332564 - https://vuldb.com/?ctiid.332564 - https://vuldb.com/?submit.686895 - https://github.com/4m3rr0r/PoCVulDb/issues/6
CVE ID: CVE-2025-13239 State: PUBLISHED Published: 2025-11-16T06:02:05.740Z Last Updated: 2025-11-17T17:09:17.858Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N/E:P/RL:X/RC:R) Vendors: Bdtask, CodeCanyon Products: Isshue Multi Store eCommerce Shopping Cart Solution Problem Types: CWE-841, CWE-840 Description: A security vulnerability has been detected in Bdtask/CodeCanyon Isshue Multi Store eCommerce Shopping Cart Solution 5. Affected by this issue is some unknown functionality of the file /submit_checkout. Such manipulation of the argument order_total_amount/cart_total_amount leads to enforcement of behavioral workflow. The attack may be launched remotely. The expl
otal_amount/cart_total_amount leads to enforcement of behavioral workflow. The attack may be launched remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.332565 - https://vuldb.com/?ctiid.332565 - https://vuldb.com/?submit.686896 - https://github.com/4m3rr0r/PoCVulDb/issues/7
CVE ID: CVE-2025-13240 State: PUBLISHED Published: 2025-11-16T06:32:05.490Z Last Updated: 2025-11-16T06:32:05.490Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Student Information System Problem Types: CWE-89, CWE-74 Description: A vulnerability was detected in code-projects Student Information System 2.0. This affects an unknown part of the file /searchquery.php. Performing manipulation of the argument s results in sql injection. Remote exploitation of the attack is possible. The exploit is now public and may be used. References: - https://vuldb.com/?id.332566 - https://vuldb.com/?ctiid.332566 - https://vuldb.com/?submit.687522 - htt
d. References: - https://vuldb.com/?id.332566 - https://vuldb.com/?ctiid.332566 - https://vuldb.com/?submit.687522 - https://github.com/asd1238525/cve/blob/main/SQL12.md - https://code-projects.org/
CVE ID: CVE-2025-13241 State: PUBLISHED Published: 2025-11-16T07:02:07.752Z Last Updated: 2025-11-16T07:02:07.752Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Student Information System Problem Types: CWE-89, CWE-74 Description: A flaw has been found in code-projects Student Information System 2.0. This vulnerability affects unknown code of the file /index.php. Executing manipulation of the argument Username can lead to sql injection. The attack can be executed remotely. The exploit has been published and may be used. References: - https://vuldb.com/?id.332567 - https://vuldb.com/?ctiid.332567 - https://vuldb.com/?submit.687526 - htt
d. References: - https://vuldb.com/?id.332567 - https://vuldb.com/?ctiid.332567 - https://vuldb.com/?submit.687526 - https://github.com/asd1238525/cve/blob/main/SQL13.md - https://code-projects.org/
CVE ID: CVE-2025-13242 State: PUBLISHED Published: 2025-11-16T07:32:07.004Z Last Updated: 2025-11-17T15:09:20.904Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Student Information System Problem Types: CWE-89, CWE-74 Description: A vulnerability has been found in code-projects Student Information System 2.0. This issue affects some unknown processing of the file /register.php. The manipulation leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.332568 - https://vuld
ay be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.332568 - https://vuldb.com/?ctiid.332568 - https://vuldb.com/?submit.687527 - https://github.com/asd1238525/cve/blob/main/SQL14.md - https://code-projects.org/
CVE ID: CVE-2025-13243 State: PUBLISHED Published: 2025-11-16T08:02:05.605Z Last Updated: 2025-11-17T15:07:07.645Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Student Information System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in code-projects Student Information System 2.0. Impacted is an unknown function of the file /editprofile.php. The manipulation results in sql injection. The attack may be performed from remote. The exploit has been made public and could be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.332569 - https://vuldb.com/?ctiid.332569 - https://v
Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.332569 - https://vuldb.com/?ctiid.332569 - https://vuldb.com/?submit.687528 - https://github.com/asd1238525/cve/blob/main/SQL15.md - https://code-projects.org/
CVE ID: CVE-2025-13244 State: PUBLISHED Published: 2025-11-16T08:32:05.917Z Last Updated: 2025-11-17T14:54:39.493Z Severity: N/A (CVSS 5 AV:N/AC:L/Au:N/C:N/I:P/A:N/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Student Information System Problem Types: CWE-79, CWE-94 Description: A vulnerability was determined in code-projects Student Information System 2.0. The affected element is an unknown function of the file /register.php. This manipulation causes cross site scripting. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.332570 - https://vul
be utilized. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.332570 - https://vuldb.com/?ctiid.332570 - https://vuldb.com/?submit.687529 - https://github.com/asd1238525/cve/blob/main/xss6.md - https://code-projects.org/
CVE ID: CVE-2025-13245 State: PUBLISHED Published: 2025-11-16T09:02:05.554Z Last Updated: 2025-11-17T14:51:51.797Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Student Information System Problem Types: CWE-79, CWE-94 Description: A vulnerability was identified in code-projects Student Information System 2.0. The impacted element is an unknown function of the file /editprofile.php. Such manipulation leads to cross site scripting. It is possible to launch the attack remotely. The exploit is publicly available and might be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.332571 - https://vuldb.co
e used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.332571 - https://vuldb.com/?ctiid.332571 - https://vuldb.com/?submit.687531 - https://github.com/asd1238525/cve/blob/main/xss7.md - https://code-projects.org/