PT-2025-31560 · Unknown · Cloudclassroom-Php Project

Sacx-7 · CVE-2025-50866 · Published 2025-07-31 · Updated 2025-07-31

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions CloudClassroom-PHP-Project version 1.0

Description The software contains a reflected Cross-site Scripting (XSS) vulnerability in the email parameter of the /postquerypublic API endpoint. Improper sanitization allows an attacker to inject arbitrary JavaScript code that executes in the context of the user’s browser, potentially leading to session hijacking or phishing attacks.

Recommendations Ensure proper sanitization of the email parameter within the /postquerypublic API endpoint.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2025-50866

Affected Products

Cloudclassroom-Php Project

References · 6

• 🔥 https://github.com/SacX-7/CVE-2025-50866 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-50866 · Security Note
• https://osv.dev/vulnerability/CVE-2025-50866 · Vendor Advisory
• https://twitter.com/CVEnew/status/1950969248978968731 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1950973512161624443 · Twitter Post
• https://t.me/CVEtracker/28877 · Telegram Post