CNNVD-202510-3630 Information

CNNVD ID

CNNVD-202510-3630

CVE-2025-12230

  • CNNVD Published: 2025-10-27

Description (Chinese)

Projectworlds Expense Management System是Projectworlds开源的一个费用管理系统。 Projectworlds Expense Management System 1.0版本存在安全漏洞,该漏洞源于对文件/public/admin/currencies/create中未知函数的错误操作,可能导致跨站脚本攻击。

Description (English)

Projectworlds Expense Management System is a cost management system for the open source of Projectworlds. Projectworlds Expense Management System Version 1.0 contains a security loophole resulting from an error in the unknown function in the document/public/admin/currences/create, which may result in a cross-site script attack.

Hazard Level

Critical

Vulnerability Type

其他

Affected Vendor

Projectworlds

Published

2025-10-27

Last Modified

2026-02-24

References

https://vuldb.com/?submit.673707 https://vuldb.com/?ctiid.329900 https://vuldb.com/?id.329900 https://github.com/QIU-DIE/CVE/issues/11

Share on: