Security Advisory

CVE-2025-51967

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-08-28 00:00:00
Last updated 2025-08-28 20:11:01
Assigner mitre
State PUBLISHED

Description

A Reflected Cross-site Scripting (XSS) vulnerability exists in the themeSet.php file of ProjectsAndPrograms School Management System 1.0. The application fails to sanitize user-supplied input in the theme POST parameter, allowing an attacker to inject and execute arbitrary JavaScript in a victims browser.