CVE-2025-29427

Summary

CVE-2025-29427 is a Cross Site Scripting (XSS) vulnerability affecting version 1.0 of the Code-projects Online Class and Exam Scheduling System. The weakness lies in the profile.php file, which can be exploited through maliciously crafted input in the member_first and member_last parameters. Successful attacks could result in unauthorized script execution within a user's browser, potentially leading to information disclosure or unauthorized actions on the affected system. It is essential that users and administrators of this platform apply the necessary patches or updates to mitigate this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.