CVE-2025-0581
CVSS 3.1 Score 3.5 of 10 (low)
Details
Published Jan 20, 2025
CWE ID 94
CWE ID 79
Summary
CVE-2025-0581 is a newly disclosed vulnerability affecting the CampCodes School Management Software version 1.0. This issue is classified as problematic and lies within the Chat History component's /chat/group/send file. Manipulation of the message argument can lead to cross-site scripting (XSS), enabling remote attackers to inject malicious code into unsuspecting users' web browsers. The exploit for this vulnerability has been made public, increasing the risk of potential attacks.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- CampCodes School Management Software