CVE-2025-28121

Severity: medium (CVSS 6.1 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.9% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2025-04-21 · updated 2026-06-17
Weakness: CWE-79

Description

code-projects Online Exam Mastering System 1.0 is vulnerable to Cross Site Scripting (XSS) in feedback.php via the "q" parameter allowing remote attackers to execute arbitrary code.

Affected products

code-projects Online Exam Mastering System: 1.0

References

https://code-projects.org/online-exam-mastering-system-php/
https://github.com/pruthuraut/CVE-2025-28121
https://github.com/pruthuraut/CVE-2025-28121

Get alerted when CVE-2025-28121 or the next vulnerability affects your stack