CVE-2025-28121

code-projects Online Exam Mastering System 1.0 is vulnerable to Cross Site Scripting (XSS) in feedback.php via the "q" parameter allowing remote attackers to execute arbitrary code.

CVSS v3.1 CNA

6.1 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS

0.90% chance of exploitation in the next 30 days, 59th percentile

Published

2025-04-21

Proof-of-concept exploits (1)

• pruthuraut/CVE-2025-281210★ · 2025-04-19

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/52272

Security advisories

• https://code-projects.org/online-exam-mastering-system-php

References

• CVE Record
• NVD entry

Related

• CVE-2025-46173