CVE-2025-29568

Severity: medium (CVSS 4.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2025-04-24 · updated 2026-06-17
Weakness: CWE-79

Description

A vulnerability has been discovered in the code-projects Online Class and Exam Scheduling System 1.0. The issue affects some unknown features in the file /Scheduling/pages/class_sched.php. Manipulating the class parameter can lead to cross-site scripting (XSS).

Affected products

code-projects Online Class And Exam Scheduling System: 1.0

References

https://github.com/secloverwang/-Vulnerability-recurrence/issues/1
https://github.com/secloverwang/Vulnerability-recurrence/issues/1

Get alerted when CVE-2025-29568 or the next vulnerability affects your stack