Code-Projects Online Exam Mastering System vulnerabilities

5 CVEs affecting Code-Projects Online Exam Mastering System, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-46173, published 2025-05-27.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2025-28121, published 2025-04-21. Medium severity, CVSS 6.1. EPSS: 0.9% chance of exploitation in the next 30 days. code-projects Online Exam Mastering System 1.0 is vulnerable to Cross Site Scripting (XSS) in feedback.php via the "q" parameter allowing remote attackers to execute arbitrary code.
CVE-2024-12891, published 2024-12-22. High severity, CVSS 8.8. EPSS: 0.5% chance of exploitation in the next 30 days. A vulnerability classified as critical has been found in code-projects Online Exam Mastering System 1.0. Affected is an unknown function of the file /account.php?q=quiz&step=2. The manipulation of…
CVE-2024-12890, published 2024-12-22. High severity, CVSS 8.8. EPSS: 0.5% chance of exploitation in the next 30 days. A vulnerability was found in code-projects Online Exam Mastering System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /update.php?q=quiz&step=2. The…
CVE-2024-12892, published 2024-12-22. Medium severity, CVSS 5.4. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability classified as problematic was found in code-projects Online Exam Mastering System 1.0. Affected by this vulnerability is an unknown functionality of the file /sign.php?q=account.php.…
CVE-2025-46173, published 2025-05-27. Medium severity, CVSS 6.1. EPSS: 0.3% chance of exploitation in the next 30 days. code-projects Online Exam Mastering System 1.0 is vulnerable to Cross Site Scripting (XSS) via the name field in the feedback form.