Description
PHP Education Manager v1.0 is vulnerable to Cross Site Scripting (XSS) in the worksheet.php file via the participant_name parameter.
Published: 2025-10-20
Score: 6.1 Medium
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Remediation

No vendor fix or workaround currently provided.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Wed, 22 Oct 2025 17:00:00 +0000

Type Values Removed Values Added
First Time appeared Iqbolshoh
Iqbolshoh php Education Management
CPEs cpe:2.3:a:iqbolshoh:php_education_management:1.0:*:*:*:*:*:*:*
Vendors & Products Iqbolshoh
Iqbolshoh php Education Management

Mon, 20 Oct 2025 21:15:00 +0000

Type Values Removed Values Added
Weaknesses CWE-79
Metrics cvssV3_1

{'score': 6.1, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N'}

ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'poc', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Mon, 20 Oct 2025 20:45:00 +0000

Type Values Removed Values Added
Description PHP Education Manager v1.0 is vulnerable to Cross Site Scripting (XSS) in the worksheet.php file via the participant_name parameter.
References

Subscriptions

Iqbolshoh Php Education Management
cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published:

Updated: 2025-10-20T20:43:47.926Z

Reserved: 2025-09-26T00:00:00.000Z

Link: CVE-2025-60781

cve-icon Vulnrichment

Updated: 2025-10-20T20:43:41.180Z

cve-icon NVD

Status : Analyzed

Published: 2025-10-20T21:15:37.860

Modified: 2025-10-22T16:52:44.457

Link: CVE-2025-60781

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses