PT-2025-35837 · Code Projects · Responsive Blog Site

111Ctx · Published 2025-09-03 · Updated 2025-09-04 · CVE-2025-9929

Positive Technologies (AI Summary)

CVSS v3.1

4.8

Medium

Base vector

AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions code-projects Responsive Blog Site version 1.0

Description A weakness exists in code-projects Responsive Blog Site 1.0, affecting an unknown function within the blogs view.php file. Manipulation of the product code, gen name, product name, or supplier argument can lead to cross site scripting. This issue is potentially exploitable remotely, and an exploit has been publicly released.

Recommendations As a temporary workaround, consider restricting or sanitizing the product code, gen name, product name, and supplier arguments to prevent manipulation. Disable or restrict access to the blogs view.php file until a fix is available.

Exploit

Fix

XSS

Code Injection

Weakness Enumeration

CWE-79

CWE-94

Related Identifiers

CVE-2025-9929

Affected Products

Responsive Blog Site

References · 9

• 🔥 https://github.com/chen2496088236/CVE/issues/5 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-9929 · Security Note
• https://osv.dev/vulnerability/CVE-2025-9929 · Vendor Advisory
• https://twitter.com/VulmonFeeds/status/1963589701010358272 · Twitter Post
• https://vuldb.com/?ctiid.322331 · Note
• https://vuldb.com/?submit.642586 · Note
• https://twitter.com/CVEnew/status/1963407117861490777 · Twitter Post
• https://vuldb.com/?id.322331 · Note
• https://code-projects.org · Note