CNNVD-202510-3628 Information
Oct 27, 2025
cve
CNNVD ID
CNNVD-202510-3628
Related CVE
- CNNVD Published: 2025-10-27
Description (Chinese)
Projectworlds Expense Management System是Projectworlds开源的一个费用管理系统。 Projectworlds Expense Management System 1.0版本存在安全漏洞，该漏洞源于对文件/public/admin/expense_categories/create的错误操作，可能导致跨站脚本攻击。
Description (English)
Projectworlds Expense Management System is a cost management system for the open source of Projectworlds. Projectworlds Expense Management System Version 1.0 has a security loophole, which stems from a mishandling of the document/public/admin/expense categories/create, which may result in a cross-site script attack.
Hazard Level
Critical
Vulnerability Type
其他
Affected Vendor
Projectworlds
Published
2025-10-27
Last Modified
2026-02-24
References
https://github.com/QIU-DIE/CVE/issues/12 https://vuldb.com/?ctiid.329901 https://vuldb.com/?id.329901 https://vuldb.com/?submit.673708
Share on: