CNNVD-202510-1383 Information

CNNVD ID

CNNVD-202510-1383

CVE-2025-11512

  • CNNVD Published: 2025-10-09

Description (Chinese)

Code-Projects Voting System是Code-Projects开源的一个选举系统。 Code-Projects Voting System 1.0版本存在跨站脚本漏洞,该漏洞源于对文件/admin/voters_add.php中参数Firstname/Lastname/Platform的错误操作,可能导致跨站脚本攻击。

Description (English)

Code-ProjectsVoting Systems is an open-source electoral system for Code-Projects. Version 1.0 of Code-ProjectsVoting System has a cross-site script loophole, which results from an error in the parameter Firstname/Lastname/Platform in the file/admin/voters add.php, which may result in a cross-site script attack.

Hazard Level

High

Vulnerability Type

跨站脚本

Affected Vendor

Code-Projects

Published

2025-10-09

Last Modified

2026-02-24

References

https://code-projects.org/ https://github.com/underatted/CVE/issues/14 https://vuldb.com/?ctiid.327637 https://vuldb.com/?id.327637 https://vuldb.com/?submit.669497

Share on: