CVE-2025-29431: code-projects online_class_and_exam_scheduling_system

Vulnerability summary

CVE-2025-29431 is a low (CVSS 3.2) vulnerability in code-projects online_class_and_exam_scheduling_system. EPSS estimates a 0.21% chance of exploitation in the next 30 days, higher than 10% of scored vulnerabilities. 1 public exploit is recorded.

Timeline

1. 17-03-2025
   PublishedVulnerability first disclosed.
2. 19-03-2025
   Last modifiedVulnerability information updated.

Description

Code-projects Online Class and Exam Scheduling System V1.0 is vulnerable to Cross Site Scripting (XSS) in /pages/department.php via the id, code, and name parameters.

• CWE-80Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)The product receives input from an upstream component, but it does not neutralize or incorrectly neutralizes special characters such as "<", ">", and "&" that could be interpreted as web-scripting elements when they are sent to a downstream component that processes web pages.