Low severity3.5NVD Advisory· Published Feb 10, 2025· Updated Jun 17, 2026
CVE-2025-1159
CVE-2025-1159
Description
A vulnerability was found in CampCodes School Management Software 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /academic-calendar. The manipulation leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3cpe:2.3:a:campcodes:school_management_software:1.0:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:campcodes:school_management_software:1.0:*:*:*:*:*:*:*
- (no CPE)range: = 1.0
- (no CPE)range: 1.0
Patches
Vulnerability mechanics
References
5- github.com/KhukuriRimal/Vulnerabilities/blob/main/Stored%20Cross%20Site%20Scripting-%20Teachers%20Account%20Takeover%20Possibility.pdfnvdExploitMitigationThird Party Advisory
- vuldb.comnvdThird Party AdvisoryVDB Entry
- vuldb.comnvdPermissions RequiredVDB Entry
- vuldb.comnvdPermissions RequiredVDB Entry
- www.campcodes.comnvdProduct
News mentions
0No linked articles in our index yet.