PT-2025-8749 · Unknown · Cloudclassroom-Php Project
CVSS v3.1
6.1
Medium
| Vector | AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
CloudClassroom-PHP Project version 1.0
Description
A Cross Site Scripting issue allows a remote attacker to execute arbitrary code via the
exid parameter of the assessment function.Recommendations
For CloudClassroom-PHP Project version 1.0, avoid using the
exid parameter in the assessment function until a fix is available. Consider restricting access to the assessment function to minimize the risk of exploitation.Exploit
Fix
XSS
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Cloudclassroom-Php Project