VulnerabilityAnalyzed
CVE-2025-12231
A security vulnerability has been detected in projectworlds Expense Management System 1.0.
LOW 1.9EPSS 0.24%
Does this matter?
Lower severity and a low EPSS score (0.24%). Track it; it rarely justifies an emergency change on its own.
Description
A security vulnerability has been detected in projectworlds Expense Management System 1.0. Affected is an unknown function of the file /public/admin/expense_categories/create of the component Expense Categories Page. Such manipulation leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used.
- CVSS 4.0
- 1.9 LOWCVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/M
- EPSS
- 0.24% probability · 15th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-79, CWE-94
- Affected
- projectworlds/expense management system
- Source
- cna@vuldb.com
References
- https://github.com/QIU-DIE/CVE/issues/12Exploit, Issue Tracking
- https://vuldb.com/?ctiid.329901Permissions Required, VDB Entry
- https://vuldb.com/?id.329901Third Party Advisory, VDB Entry
- https://vuldb.com/?submit.673708Third Party Advisory, VDB Entry
- https://github.com/QIU-DIE/CVE/issues/12Exploit, Issue Tracking
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.