Projectworlds Expense Management System vulnerabilities

4 CVEs affecting Projectworlds Expense Management System, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-12231, published 2025-10-27.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2025-12231, published 2025-10-27. Medium severity, CVSS 4.8. EPSS: 0.3% chance of exploitation in the next 30 days. A security vulnerability has been detected in projectworlds Expense Management System 1.0. Affected is an unknown function of the file /public/admin/expense_categories/create of the component Expense…
CVE-2025-12230, published 2025-10-27. Medium severity, CVSS 4.8. EPSS: 0.3% chance of exploitation in the next 30 days. A weakness has been identified in projectworlds Expense Management System 1.0. This impacts an unknown function of the file /public/admin/currencies/create of the component Currency Page. This…
CVE-2025-12229, published 2025-10-27. Medium severity, CVSS 4.8. EPSS: 0.3% chance of exploitation in the next 30 days. A security flaw has been discovered in projectworlds Expense Management System 1.0. This affects an unknown function of the file /public/admin/roles/create of the component Roles Page. The…
CVE-2025-12228, published 2025-10-27. Medium severity, CVSS 4.8. EPSS: 0.3% chance of exploitation in the next 30 days. A vulnerability was identified in projectworlds Expense Management System 1.0. The impacted element is an unknown function of the file /public/admin/users/create of the component Users Page. The…