CVE-2025-12230
LOW2.4CVSS v3
3.3CVSS v2
0.26%
EPSS (exploit probability)
CWE-79CWE
Description
A weakness has been identified in projectworlds Expense Management System 1.0. This impacts an unknown function of the file /public/admin/currencies/create of the component Currency Page. This manipulation causes cross site scripting. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be used for attacks.
CVSS v3 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N
Affected routers (0)
No routers currently mapped to this CVE in our database.