CVE-2025-29568

A vulnerability has been discovered in the code-projects Online Class and Exam Scheduling System 1.0. The issue affects some unknown features in the file /Scheduling/pages/class_sched.php. Manipulating the class parameter can lead to cross-site scripting (XSS).

CVSS v3.1

4.8 MEDIUMCVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

EPSS

0.23% chance of exploitation in the next 30 days, 14th percentile

Published

2025-04-24

Proof-of-concept exploits (2)

• secloverwang/-Vulnerability-recurrence/issues/1
• secloverwang/Vulnerability-recurrence/issues/1

References

• CVE Record
• NVD entry

Related

• CVE-2025-2956
• CVE-2025-2957
• CVE-2025-29557
• CVE-2025-29573
• CVE-2025-29556
• CVE-2025-2958