medium6.1Public exploit code
CVE-2025-28121
code-projects Online Exam Mastering System 1.0 is vulnerable to Cross Site Scripting (XSS) in feedback.php via the "q" parameter allowing remote attackers to e…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- code-projects Online Exam Mastering System 1.0 - Reflected Cross-Site Scripting (XSS)2025-04-22 · remote · php
Impact
code-projects Online Exam Mastering System 1.0 is vulnerable to Cross Site Scripting (XSS) in feedback.php via the "q" parameter allowing remote attackers to execute arbitrary code.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Code-Projects | Online Exam Mastering System | Version 1.0 |