CVE-2025-11512

MediumCVSS 4.3

Published: 09/10/2025(UTC)Updated: 08/10/2026(UTC)Translated: 08/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.40%

32th percentile - higher than 32% of all known CVEs

Summary

A cross-site scripting (XSS) vulnerability was found in code-projects Voting System 1.0 in the file /admin/voters_add.php. Manipulating the Firstname/Lastname/Platform arguments allows remote attack. The exploit has been publicly disclosed and may be used.

Risk Assessment

An attacker could inject malicious scripts, potentially leading to session theft, account takeover, or content modification.

Recommendation

Apply input filtering and encoding, and implement Content Security Policy (CSP).

Other vulnerabilities in Voting System

CVE-2025-11421Low
A flaw in code-projects Voting System 1.0 affects an unknown function in /admin/candidates_edit.php. Manipulation of Firstname/Lastname/Platform arguments causes cross site scripting. Remote exploitation is possible. The exploit has been published.

Original NVD description (English source)

A vulnerability was found in code-projects Voting System 1.0. Affected by this issue is some unknown functionality of the file /admin/voters_add.php. The manipulation of the argument Firstname/Lastname/Platform results in cross site scripting. The attack can be executed remotely. The exploit has been made public and could be used.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS