CVE-2025-11421

CWE-79 — Cross-site Scripting (XSS)CWE-94 — Code Injection3 documents3 sources
Severity
5.1MEDIUM
EPSS
0.0%
top 92.53%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Code-projects Voting SystemFabian Voting System
Timeline
PublishedOct 8

Description

A flaw has been found in code-projects Voting System 1.0. The affected element is an unknown function of the file /admin/candidates_edit.php. This manipulation of the argument Firstname/Lastname/Platform causes cross site scripting. Remote exploitation of the attack is possible. The exploit has been published and may be used.

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N

Affected Packages2 packages

🔴Vulnerability Details

2
GHSA
GHSA-v9jx-pc2p-jr8p: A flaw has been found in code-projects Voting System 1↗2025-10-08
▶
CVEList
code-projects Voting System candidates_edit.php cross site scripting↗2025-10-08
▶
CVE-2025-11421 (MEDIUM CVSS 5.1) | A flaw has been found in code-proje | cvebase.io