PT-2025-37995 · Unknown · Code-Projects Document Management System

Chen1-Boop · Published 2025-09-16 · Updated 2025-09-20 · CVE-2025-56289

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions code-projects Document Management System version 1.0

Description The Document Management System contains a Cross Site Scripting (XSS) flaw. An attacker can exploit this issue to leak an administrator's cookie information by injecting malicious XSS code into the Company field during file uploads.

Recommendations As a temporary workaround, sanitize user input for the Company field to prevent the injection of malicious code.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2025-56289

Affected Products

Code-Projects Document Management System

References · 5

• 🔥 https://github.com/Chen1-Boop/CVE/blob/main/CVE-2025-56289.md · Exploit
• https://osv.dev/vulnerability/CVE-2025-56289 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-56289 · Security Note
• http://code-projects.com · Note
• https://twitter.com/CVEnew/status/1969291982355792226 · Twitter Post