CNNVD-202510-3629 Information
Oct 27, 2025
cve
CNNVD ID
CNNVD-202510-3629
Related CVE
- CNNVD Published: 2025-10-27
Description (Chinese)
Projectworlds Expense Management System是Projectworlds开源的一个费用管理系统。 Projectworlds Expense Management System 1.0版本存在代码注入漏洞，该漏洞源于对文件/public/admin/roles/create中未知函数的错误操作，可能导致跨站脚本攻击。
Description (English)
Projectworlds Expense Management System is a cost management system for the open source of Projectworlds. Projectworlds Expense Management System Version 1.0 contains a code-injection loophole resulting from an error in the unknown function in the file/public/admin/rules/create, which may result in a cross-site script attack.
Hazard Level
Critical
Vulnerability Type
代码注入
Affected Vendor
Projectworlds
Published
2025-10-27
Last Modified
2026-02-24
References
https://vuldb.com/?submit.673706 https://vuldb.com/?ctiid.329899 https://github.com/QIU-DIE/CVE/issues/10 https://vuldb.com/?id.329899
Share on: