PT-2025-6840

CVE-2025-1195

Published

2025-02-12

Updated

2025-02-20

Description by

CVSS 3.1

5.4

Medium

MetricsAV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions code-projects Real Estate Property Management System version 1.0

Description A problem has been found in the processing of the file /Admin/EditCategory. The manipulation of the CategoryId argument leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

Recommendations For code-projects Real Estate Property Management System version 1.0, consider disabling access to the /Admin/EditCategory file until a patch is available. Restrict the manipulation of the CategoryId argument to minimize the risk of exploitation.

Exploitability

Exploit

Fix

Impacts

Researchers

Vendors

Affected products

Weakness enumeration

CWE-94: Improper Control of Generation of Code (\'Code Injection\')

CWE-79: Improper Neutralization of Input During Web Page Generation (\'Cross-site Scripting\')

Related identifiers

CVE-2025-1195