A vulnerability has been discovered in the code-projects Online Class and Exam Scheduling System 1.0. The issue affects some unknown features in the file /Scheduling/pages/class_sched.php. Manipulating the class parameter can lead to cross-site scripting (XSS).
CVE ID: CVE-2025-29568
CVSS Base Severity: MEDIUM
CVSS Base Score: 4.8
CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
Vendor: n/a
Product: n/a
EPSS Score: 0.03% (probability of being exploited)
EPSS Percentile: 5.33% (scored less or equal to compared to others)
EPSS Date: 2025-05-23 (when was this score calculated)