CVE-2025-60302 in Client Details System

Sumário

de MITRE • 09/10/2025

code-projects Client Details System 1.0 is vulnerable to Cross Site Scripting (XSS). When adding customer information, the client details system fills in malicious JavaScript code in the username field.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• Responsável: MITRE
• Reservar: 26/09/2025
• Divulgação: 09/10/2025
• Moderação: aceite
• Entrada: VDB-327765
• CPE: pronto
• CWE: CWE-79 (confirmado)
• CVSS: 3.5 (VulDB)
• EPSS: 0.00213
• KEV: não
• Atividades: muito baixo
• Sector: Education, Insurance, ...

Fontes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2025-60302
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-60302
• CVE Details: https://www.cvedetails.com/cve/CVE-2025-60302/