Medium · 6.1 CVE-2025-60302 EUVD-2025-33357GHSA-fq7f-prvj-g7c3

code-projects Client Details System 1.0 is vulnerable to Cross Site Scripting (XSS). When adding customer information, the client details s…

Published Oct 9, 2025 · Updated Jul 5, 2026 · Assigned by mitre

Description

code-projects Client Details System 1.0 is vulnerable to Cross Site Scripting (XSS). When adding customer information, the client details system fills in malicious JavaScript code in the username field.

References

https://github.com/Chen1-Boop/CVE/blob/main/CVE-2025-60302.md