Reflected XSS Vulnerability in ProjectsAndPrograms School Management System
CVE-2025-51967

6.1MEDIUM

Key Information:

Vendor: ProjectsAndPrograms
Status: School Management System
Vendor: CVE Published:; 28 August 2025

🔔 Create ProjectsAndPrograms Vulnerability Alert

What is CVE-2025-51967?

The ProjectsAndPrograms School Management System version 1.0 is susceptible to a reflected Cross-site Scripting (XSS) vulnerability due to improper handling of user input in the theme POST parameter. Without adequate input sanitation, attackers can exploit this flaw to insert and execute malicious JavaScript code in the user's browser, potentially compromising user data and application integrity. It is crucial for users and administrators to remain informed and apply security best practices to mitigate risks associated with this vulnerability.

References

https://github.com/jairajparyani/CVE-s/blob/main/CVE-2025...

CVSS V3.1

Score:

6.1

Severity:

MEDIUM

Confidentiality:

Low

Integrity:

Low

Availability:

Low

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

Required

Scope:

Changed

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Aug 28, 2025
Vulnerability Reserved
Jun 16, 2025

CVE-2025-51967 Data

JSON