Cross-Site Scripting Vulnerability in CloudClassroom PHP Project
CVE-2025-46178

6.1MEDIUM

Key Information:

Vendor: CloudClassroom
Status: CloudClassroom PHP Project
Vendor: CVE Published:; 9 June 2025

🔔 Create CloudClassroom Vulnerability Alert

What is CVE-2025-46178?

A Cross-Site Scripting (XSS) vulnerability is present in the CloudClassroom PHP Project's askquery.php file through the eid parameter. This flaw allows remote attackers to craft specific URLs that inject arbitrary JavaScript code into the browser session of victims, potentially leading to session hijacking or unauthorized defacement of web content. Security measures should be taken to sanitize user inputs and prevent such attacks.

References

https://github.com/SacX-7/CVE-2025-46178/blob/main/Cross-...

CVSS V3.1

Score:

6.1

Severity:

MEDIUM

Confidentiality:

Low

Integrity:

Low

Availability:

Low

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

Required

Scope:

Changed

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Jun 9, 2025
Vulnerability Reserved
Apr 22, 2025

CVE-2025-46178 Data

JSON