CVE-2025-29430

Summary

CVE-2025-29430 is a Cross-Site Scripting (XSS) vulnerability affecting the Code-projects Online Class and Exam Scheduling System V1.0. The flaw resides in the /pages/room.php file, which is susceptible to XSS attacks through the id and rome parameters. An attacker can inject malicious scripts into the webpage, posing a threat to users who visit the affected site. The vulnerability could be exploited to steal sensitive information, conduct phishing attacks, or even take control of user sessions. System administrators are urged to patch the issue promptly to prevent potential security breaches.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.