CVE-2025-29429

Summary

CVE-2025-29429 is a newly identified Cross-Site Scripting (XSS) vulnerability affecting the Code-projects Online Class and Exam Scheduling System V1.0. Three parameters, specifically id, code, and name, in the /pages/program.php file are susceptible to this issue. Successful exploitation of this vulnerability could allow attackers to inject and execute malicious scripts on users' browsers, potentially leading to theft of sensitive information or unauthorized system access. Users are advised to upgrade to the latest version or apply relevant patches to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.