Carmelo Question Paper Generator vulnerabilities

2 CVEs affecting Carmelo Question Paper Generator, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-14203, published 2025-12-07.

More from Carmelo.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2025-13583, published 2025-11-24. Critical severity, CVSS 9.8. EPSS: 0.4% chance of exploitation in the next 30 days. A weakness has been identified in code-projects Question Paper Generator 1.0. This affects an unknown part of the file /signupscript.php of the component POST Parameter Handler. Executing…
• CVE-2025-14203, published 2025-12-07. High severity, CVSS 8.8. EPSS: 0.4% chance of exploitation in the next 30 days. A flaw has been found in code-projects Question Paper Generator up to 1.0. This vulnerability affects unknown code of the file /selectquestionuser.php. This manipulation of the argument subid causes…