CNNVD-202510-3631 Information
Oct 27, 2025
cve
CNNVD ID
CNNVD-202510-3631
Related CVE
- CNNVD Published: 2025-10-27
Description (Chinese)
Projectworlds Expense Management System是Projectworlds开源的一个费用管理系统。 projectworlds Expense Management System 1.0版本存在代码注入漏洞，该漏洞源于对文件/public/admin/users/create中未知函数的错误操作，可能导致跨站脚本攻击。
Description (English)
Projectworlds Expense Management System is a cost management system for the open source of Projectworlds. There is a code-injection loophole in version 1.0 of projectworlds Express Management System, which results from an error in the unknown function in the file/public/admin/user/create, which may result in a cross-site script attack.
Hazard Level
Critical
Vulnerability Type
代码注入
Affected Vendor
Projectworlds
Published
2025-10-27
Last Modified
2026-02-24
References
https://github.com/QIU-DIE/CVE/issues/9 https://vuldb.com/?ctiid.329898 https://vuldb.com/?id.329898 https://vuldb.com/?submit.673705
Share on: