VULNERABILITY INTELLIGENCE

CVE-2025-60302

CVSS score6.1 MEDIUM
EPSS probability0.23%
CISA KEVNot currently listed
Published2025-10-09
Last modified2026-07-05
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Description

code-projects Client Details System 1.0 is vulnerable to Cross Site Scripting (XSS). When adding customer information, the client details system fills in malicious JavaScript code in the username field.

Weakness classification

  • 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-79

Primary references