CVE-2025-1195 — Cross-site Scripting in Real Estate Property Management System

CWE-79 — Cross-site ScriptingCWE-94 — Code InjectionCWE-416 — Use After Free6 documents5 sources
Severity
5.1MEDIUMNVD
EPSS
0.3%
top 49.47%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Code-projects Real Estate Property Management SystemFabian Real Estate Property Management System
Timeline
PublishedFeb 12
Latest updateAug 30

Description

A vulnerability, which was classified as problematic, has been found in code-projects Real Estate Property Management System 1.0. This issue affects some unknown processing of the file /Admin/EditCategory. The manipulation of the argument CategoryId leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N

Affected Packages2 packages

🔴Vulnerability Details

2
GHSA
GHSA-838w-45gf-p3pg: A vulnerability, which was classified as problematic, has been found in code-projects Real Estate Property Management System 1↗2025-02-12
▶
CVEList
code-projects Real Estate Property Management System EditCategory cross site scripting↗2025-02-12
▶

📋Vendor Advisories

3
Red Hat
kernel: f2fs: fix to avoid out-of-boundary access in dnode page↗2025-08-30
▶
Microsoft
A use-after-free flaw was found in reconn_set_ipaddr_from_hostname in fs/cifs/connect.c in the Linux kernel. The issue occurs when it forgets to set the free pointer server->hostname to NULL leading t↗2023-05-09
▶
Microsoft
A use-after-free vulnerability was found in the Linux kernel in drivers/net/hamradio. This flaw allows a local attacker with a user privilege to cause a denial of service (DOS) when the mkiss or sixpa↗2022-04-12
▶
CVE-2025-1195 — Cross-site Scripting | cvebase