CVE-2025-28121: Code-Projects Online Exam Mastering System

Medium severity, CVSS 6.1. EPSS: 0.9% chance of exploitation in the next 30 days.

code-projects Online Exam Mastering System 1.0 is vulnerable to Cross Site Scripting (XSS) in feedback.php via the "q" parameter allowing remote attackers to execute arbitrary code.

Affected products

Published 2025-04-21. Last modified 2026-06-17.