Filtered by vendor Oranbyte Subscriptions
Total 1 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2025-51967 2 Oranbyte, School Management System Project 2 School Management System, School Management System 2025-09-09 6.1 Medium
A Reflected Cross-site Scripting (XSS) vulnerability exists in the themeSet.php file of ProjectsAndPrograms School Management System 1.0. The application fails to sanitize user-supplied input in the theme POST parameter, allowing an attacker to inject and execute arbitrary JavaScript in a victim's browser.