CVE-2025-9439 MEDIUM

CVE-2025-9439: 1000projects Online Project Report Submission and Evaluation System edit_faculty.php cross site scripting

Vendor 1000Projects
Product Online Project Report Submission and Evaluation System
Weakness CWE-79 · XSS
Published August 26, 2025
Last update August 26, 2025
View on NVD All CVEs

CVSS base score

5.3/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction —
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P

What the vulnerability does

01Description

A weakness has been identified in 1000projects Online Project Report Submission and Evaluation System 1.0. Affected by this vulnerability is an unknown functionality of the file /rse/admin/edit_faculty.php?id=2. This manipulation of the argument Name causes cross site scripting. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be exploited.

Key dates

02Disclosure timeline

August 26, 2025 CVE published
August 26, 2025 Record updated