← All advisories

Medium severity6.1NVD Advisory· Published Oct 20, 2025· Updated Jun 17, 2026

CVE-2025-60781

CVE-2025-60781

Description

PHP Education Manager v1.0 is vulnerable to Cross Site Scripting (XSS) in the worksheet.php file via the participant_name parameter.

Affected products

3

Iqbolshoh/PHP Education Management
cpe:2.3:a:iqbolshoh:php_education_management:1.0:*:*:*:*:*:*:*
PHP Education Manager/PHP Education Managercpe-rescue2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: = 1.0

Patches

Vulnerability mechanics

References

1

gold-textbook-8ff.notion.site/php-education-management-Stored-XSS-Vulnerability-25985e97f35380018b9af0f4b678002cnvdExploitThird Party Advisory

News mentions

0

No linked articles in our index yet.