A stored Cross-Site Scripting (XSS) vulnerability exists in the qureydetails.php page of Institute-of-Current-Students 1.0, where the input fields for Query and Answer do not properly sanitize user input. Authenticated users can inject arbitrary JavaScript code.
CVSS
No CVSS.
References
Configurations
No configuration.
History
01 Aug 2025, 18:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2025-08-01 18:15
Updated : 2025-08-01 18:15
NVD link : CVE-2025-50869
Mitre link : CVE-2025-50869
JSON object : View
Products Affected
No product.
CWE
No CWE.