VULNERABILITY INTELLIGENCE
CVE-2025-11421
CVSS score3.5 LOW
EPSS probability0.32%
CISA KEVNot currently listed
Published2025-10-08
Last modified2026-10-08
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
Description
A flaw has been found in code-projects Voting System 1.0. The affected element is an unknown function of the file /admin/candidates_edit.php. This manipulation of the argument Firstname/Lastname/Platform causes cross site scripting. Remote exploitation of the attack is possible. The exploit has been published and may be used.
Weakness classification
- cna@vuldb.com: CWE-79
Primary references
- cna@vuldb.com — Product
- cna@vuldb.com — Exploit, Issue Tracking
- cna@vuldb.com — Permissions Required, VDB Entry
- cna@vuldb.com — Third Party Advisory, VDB Entry
- cna@vuldb.com — Third Party Advisory, VDB Entry