Security Advisory
CVE-2025-51967
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
A Reflected Cross-site Scripting (XSS) vulnerability exists in the themeSet.php file of ProjectsAndPrograms School Management System 1.0. The application fails to sanitize user-supplied input in the theme POST parameter, allowing an attacker to inject and execute arbitrary JavaScript in a victims browser.