CVE-2025-11425: fallo de gravedad media en projectworlds Advanced Library Management System
projectworlds Advanced Library Management System edit_admin.php cross site scripting
Publicada el · Actualizada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
13Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 4.8epss 0.3%
A vulnerability was identified in projectworlds Advanced Library Management System 1.0. Affected is an unknown function of the file /edit_admin.php. The manipulation of the argument firstname leads to cross site scripting. It is possible to initiate the attack remotely. The exploit is publicly available and might be used. Other parameters might be affected as well.
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P
Productos afectados
projectworlds · Advanced Library Management SystemCVEs relacionadas — projectworlds Advanced Library Management System
En el mismo producto, de las más peligrosas a las menos.
CVE-2025-13572MEDIUMprojectworlds Advanced Library Management System delete_admin.php sql injectionEPSS 0.5%CVE-2025-12237MEDIUMprojectworlds Advanced Library Management System index.php sql injectionEPSS 0.5%CVE-2025-14571MEDIUMprojectworlds Advanced Library Management System borrow_book.php sql injectionEPSS 0.4%CVE-2025-14570MEDIUMprojectworlds Advanced Library Management System view_admin.php sql injectionEPSS 0.4%CVE-2025-14212MEDIUMprojectworlds Advanced Library Management System member_search.php sql injectionEPSS 0.4%CVE-2025-14211MEDIUMprojectworlds Advanced Library Management System delete_book.php sql injectionEPSS 0.4%