CVE-2025-1174 MEDIUM

CVE-2025-1174: 1000 Projects Bookstore Management System Add Book Page process_book_add.php cross site scripting

Vendor 1000 Projects
Product Bookstore Management System
Weakness CWE-79 · XSS
Published February 11, 2025
Last update February 11, 2025
View on NVD All CVEs

CVSS base score

4.8/10
Attack vector Network
Attack complexity Low
Privileges required High
User interaction —
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N

What the vulnerability does

01Description

A vulnerability has been found in 1000 Projects Bookstore Management System 1.0 and classified as problematic. This vulnerability affects unknown code of the file process_book_add.php of the component Add Book Page. The manipulation of the argument Book Name leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well.

Key dates

02Disclosure timeline

February 11, 2025 CVE published
February 11, 2025 Record updated

Related vulnerabilities

04Related CVE

CVE-2025-43860 OpemEMR Vulnerable to Stored XSS Attack in the Additional Address Section of Patient Demographics CVE-2025-23548 WordPress Responsivity plugin <= 0.0.6 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2024-20525 Cisco Identity Services Engine Reflected Cross-Site Scripting Vulnerability CVE-2024-11914 Gutenberg Blocks and Page Layouts – Attire Blocks <= 1.9.5 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2026-45483 Microsoft Office Project Server Spoofing Vulnerability