PT-2025-35084
CVE-2025-51967
·
Published
2025-08-28
·
Updated
2026-09-26
Description by
CVSS 3.1
6.1
MediumMetricsAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
ProjectsAndPrograms School Management System version 1.0
Description
A Reflected Cross-site Scripting (XSS) issue exists in the
themeSet.php file. The application does not properly sanitize user-supplied input in the theme parameter, which allows an attacker to inject and execute arbitrary JavaScript in a victim’s browser.Recommendations
As a temporary workaround, consider restricting access to the
themeSet.php file until a fix is available.
Ensure proper sanitization of the theme parameter to prevent the injection of malicious scripts.Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾