PT-2025-40396 · Unknown · Php Education Manager

Published 2025-10-02 · Updated 2025-10-02 · CVE-2025-60782

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions PHP Education Manager version 1.0

Description The software contains a Cross-Site Scripting (XSS) issue within the topics management module, specifically in the topics.php file. An attacker can inject malicious JavaScript payloads into the Title field when creating or updating topics. This allows for the execution of arbitrary JavaScript code within the context of other users' browsers.

Recommendations Update to a newer version that contains a fix for this vulnerability.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2025-60782

Affected Products

Php Education Manager

References · 7

• 🔥 https://gold-textbook-8ff.notion.site/php-education-management-Background-storage-xss-25985e97f35380db9d38e7d0fbb408d6?pvs=73 · Exploit
• 🔥 https://gold-textbook-8ff.notion.site/php-education-management-Background-storage-xss-25985e97f35380db9d38e7d0fbb408d6 · Exploit
• https://osv.dev/vulnerability/CVE-2025-60782 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-60782 · Security Note
• https://t.me/CVEtracker/33950 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1973821779123589551 · Twitter Post
• https://twitter.com/CVEnew/status/1973762721540690368 · Twitter Post