CVE-2025-56289

code-projects Document Management System 1.0 has a Cross Site Scripting (XSS) vulnerability, where attackers can leak admin's cookie information by entering malicious XSS code in the Company field when adding files.

Score

CVSS 3.1 5.4 Medium

Status

Modified - cve@mitre.org

Published

2025-09-16

Last modified

2026-07-05

Weaknesses

CWE-79

Affected products

• Document Management System (Fabian)

References

• https://github.com/Chen1-Boop/CVE/blob/main/CVE-2025-56289.md