CVE-2025-1174

Summary

CVE-2025-1174 is a newly disclosed vulnerability affecting the Add Book Page component of 1000 Projects Bookstore Management System 1.0. The issue lies in the process_book_add.php file and involves cross-site scripting (XSS) due to improper validation of user input, specifically the Book Name parameter. An attacker can exploit this remotely and potentially manipulate other parameters. The exploit is publicly known, increasing the risk of attacks.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.