VULNERABILITY INTELLIGENCE

CVE-2025-12282

CVSS score4.8 MEDIUM

EPSS probability0.29%

CISA KEVNot currently listed

Published2025-10-27

Last modified2026-10-08

Description

A vulnerability was identified in code-projects Client Details System 1.0. The affected element is an unknown function of the file /admin/manage-users.php. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit is publicly available and might be used.