CVE-2025-15052

A vulnerability was detected in code-projects Student Information System 1.0. This vulnerability affects unknown code of the file /profile.php. Performing manipulation of the argument firstname/lastname results in cross site scripting. The attack is possible to be carried out remotely. The exploit is now public and may be used.

Score

CVSS 3.1 5.4 Medium

Status

Analyzed - cna@vuldb.com

Published

2025-12-24

Last modified

2026-10-19

Weaknesses

CWE-79, CWE-94

Affected products

• Student Information System (Code-projects)
• Student Information System (Fabian)

References

• https://vuldb.com/?id.337858
• https://vuldb.com/?ctiid.337858
• https://vuldb.com/?submit.720765
• https://github.com/i4G5d/CRITICAL-SECURITY-VULNERABILITY-REPORT-Stored-XSS
• https://code-projects.org/