Vulnerabilities

TI-2025-12139 CVE-2025-13275 · GHSA-h684-p7cm-3g45

Iqbolshoh php-business-website about.php unrestricted upload

MEDIUM 56

A security vulnerability has been detected in Iqbolshoh php-business-website up to 10677743a8dfc281f85291a27cf63a0bce043c24.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.00306 Published 2025-11-17 No fix listed CWE-284

TI-2025-11207 CVE-2025-12224 · GHSA-hpjm-36pf-pv8v

Iqbolshoh php-business-website contact.php cross site scripting

LOW 23

A flaw has been found in Iqbolshoh php-business-website up to 10677743a8dfc281f85291a27cf63a0bce043c24.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00253 Published 2025-10-27 No fix listed CWE-79

TI-2025-37812 CVE-2025-60781 · GHSA-wmmj-vr96-63g3

PHP Education Manager v1.0 is vulnerable to Cross Site Scripting (XSS) in the…

MEDIUM 60

PHP Education Manager v1.0 is vulnerable to Cross Site Scripting (XSS) in the worksheet.php file via the participant_name parameter.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00228 Published 2025-10-20 No fix listed CWE-79

TI-2025-37813 CVE-2025-60782 · GHSA-cf74-m2jq-4hch

PHP Education Manager v1.0 is vulnerable to Cross Site Scripting (XSS) stored Cross-Site…

MEDIUM 58

PHP Education Manager v1.0 is vulnerable to Cross Site Scripting (XSS) stored Cross-Site Scripting (XSS) vulnerability in the topics management module (topics.php).

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00229 Published 2025-10-02 No fix listed CWE-79

Vulnerabilities

Filters

Iqbolshoh php-business-website about.php unrestricted upload

Iqbolshoh php-business-website contact.php cross site scripting

PHP Education Manager v1.0 is vulnerable to Cross Site Scripting (XSS) in the…

PHP Education Manager v1.0 is vulnerable to Cross Site Scripting (XSS) stored Cross-Site…