CVE-2025-5651

A vulnerability, which was classified as problematic, has been found in code-projects Traffic Offense Reporting System 1.0. This issue affects some unknown processing of the file saveuser.php. The manipulation of the argument user_id/username/email/name/position leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

Score
CVSS 3.1 5.4 Medium
Status
Analyzed - cna@vuldb.com
Published
2025-06-05
Last modified
2025-06-05
Weaknesses
CWE-79, CWE-94

Affected products

References