CVE-2025-1208

CWE-79 — Cross-site Scripting (XSS)CWE-94 — Code InjectionCWE-1314 documents4 sources
Severity
5.1MEDIUM
EPSS
0.3%
top 49.72%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Code-projects Wazifa SystemAnisha Wazifa System
Timeline
PublishedFeb 12
Latest updateJun 18

Description

A vulnerability was found in code-projects Wazifa System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file /Profile.php. The manipulation of the argument postcontent leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N

Affected Packages2 packages

🔴Vulnerability Details

2
GHSA
GHSA-g3mv-8h5x-hmj4: A vulnerability was found in code-projects Wazifa System 1↗2025-02-12
▶
CVEList
code-projects Wazifa System Profile.php cross site scripting↗2025-02-12
▶

📋Vendor Advisories

1
Red Hat
kernel: wifi: mac80211: Set n_channels after allocating struct cfg80211_scan_request↗2025-06-18
▶
CVE-2025-1208 (MEDIUM CVSS 5.1) | A vulnerability was found in code-p | cvebase.io