CVE-2025-60302 in Client Details System

Resumen

por MITRE • 2025-10-09

code-projects Client Details System 1.0 is vulnerable to Cross Site Scripting (XSS). When adding customer information, the client details system fills in malicious JavaScript code in the username field.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• Responsable: MITRE
• Reservar: 2025-09-26
• Divulgación: 2025-10-09
• Moderación: aceptado
• Artículo: VDB-327765
• CPE: listo
• CWE: CWE-79 (confirmado)
• CVSS: 3.5 (VulDB)
• EPSS: 0.00213
• KEV: no
• Actividades: muy bajo
• Sector: Hostingprovider, Finance, ...

Fuentes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2025-60302
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-60302
• CVE Details: https://www.cvedetails.com/cve/CVE-2025-60302/