Security Advisory

CVE-2025-60782

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-10-02 00:00:00
Last updated 2025-10-03 19:06:06
Assigner mitre
State PUBLISHED

Description

PHP Education Manager v1.0 is vulnerable to Cross Site Scripting (XSS) stored Cross-Site Scripting (XSS) vulnerability in the topics management module (topics.php). Attackers can inject malicious JavaScript payloads into the Titlefield during topic creation or updates.