Beveiligingsadvies

CVE-2025-1209

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-02-12 16:31:04
Laatst bijgewerkt 2025-02-12 19:05:05
Toegewezen door VulDB
CVSS-score 5.1
Status PUBLISHED

Beschrijving

A vulnerability classified as problematic has been found in code-projects Wazifa System 1.0. Affected is the function searchuser of the file /search_resualts.php. The manipulation of the argument firstname/lastname leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. There is a typo in the affected file name.