CVE-2025-12282

A vulnerability was identified in code-projects Client Details System 1.0. The affected element is an unknown function of the file /admin/manage-users.php. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit is publicly available and might be used.

Score

CVSS 4.0 4.8 Medium

Status

Analyzed - cna@vuldb.com

Published

2025-10-27

Last modified

2026-10-08

Weaknesses

CWE-79, CWE-94

Affected products

• Client Details System (Code-projects)
• Client Details System (Fabian)

References

• https://vuldb.com/?id.329952
• https://vuldb.com/?ctiid.329952
• https://vuldb.com/?submit.674206
• https://vuldb.com/?submit.674217
• https://github.com/hellonewbie/tutorial/issues/10
• https://github.com/hellonewbie/tutorial/issues/12
• https://code-projects.org/