CVE-2025-9595

A vulnerability was found in code-projects Student Information Management System 1.0. The impacted element is an unknown function of the file /login.php. The manipulation of the argument uname results in cross site scripting. The attack may be performed from a remote location. The exploit has been made public and could be used.

Score

CVSS 3.1 6.1 Medium

Status

Analyzed - cna@vuldb.com

Published

2025-08-29

Last modified

2026-10-18

Weaknesses

CWE-79, CWE-94

Affected products

• Student Information Management System (Code-projects)
• Student Information Management System (Itsourcecode)

References

• https://vuldb.com/?id.321769
• https://vuldb.com/?ctiid.321769
• https://vuldb.com/?submit.636359
• https://github.com/zzb1388/cve/issues/57
• https://code-projects.org/