CVE-2025-11421

LowCVSS 3.5

Published: 08/10/2025(UTC)Updated: 08/10/2026(UTC)Translated: 08/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.31%

22th percentile - higher than 22% of all known CVEs

Summary

A flaw in code-projects Voting System 1.0 affects an unknown function in /admin/candidates_edit.php. Manipulation of Firstname/Lastname/Platform arguments causes cross site scripting. Remote exploitation is possible. The exploit has been published.

Risk Assessment

An attacker can inject malicious scripts that execute in the administrator's browser, potentially leading to session theft or data modification.

Recommendation

Apply input sanitization and encoding, and update the system to a patched version.

Other vulnerabilities in Voting System

CVE-2025-11512Medium
A cross-site scripting (XSS) vulnerability was found in code-projects Voting System 1.0 in the file /admin/voters_add.php. Manipulating the Firstname/Lastname/Platform arguments allows remote attack. The exploit has been publicly disclosed and may be used.

Original NVD description (English source)

A flaw has been found in code-projects Voting System 1.0. The affected element is an unknown function of the file /admin/candidates_edit.php. This manipulation of the argument Firstname/Lastname/Platform causes cross site scripting. Remote exploitation of the attack is possible. The exploit has been published and may be used.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS