PT-2025-42812 · Unknown · Php Education Manager

Published 2025-10-20 · Updated 2025-10-21 · CVE-2025-60781

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions PHP Education Manager version 1.0

Description The software is susceptible to Cross Site Scripting (XSS) attacks. The issue is located in the worksheet.php file and involves the participant name parameter. Exploitation of this issue could allow an attacker to inject malicious scripts into the application.

Recommendations Apply updates to address the issue in the worksheet.php file. Sanitize the participant name parameter to prevent the injection of malicious scripts.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2025-60781

Affected Products

Php Education Manager

References · 7

• 🔥 https://gold-textbook-8ff.notion.site/php-education-management-Stored-XSS-Vulnerability-25985e97f35380018b9af0f4b678002c?pvs=73 · Exploit
• https://osv.dev/vulnerability/CVE-2025-60781 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-60781 · Security Note
• https://twitter.com/CVEnew/status/1980374107838386544 · Twitter Post
• https://t.me/cveNotify/139532 · Telegram Post
• https://t.me/CVEtracker/35351 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1980452596323102774 · Twitter Post