Cross-Site Scripting Vulnerability in code-projects Online Book Shop 1.0

CVE-2025-0301

Summary

A cross-site scripting vulnerability has been identified in the file /subcat.php of code-projects Online Book Shop 1.0. This vulnerability arises due to inadequate validation of the 'catnm' parameter, allowing attackers to inject malicious scripts. These scripts can be executed in the context of the user's browser, potentially leading to unauthorized actions or data theft. Remote attackers can exploit this issue, and as it has been disclosed publicly, it is crucial for administrators and users of the affected product to take immediate action to mitigate the risks associated with this vulnerability.

References