A security vulnerability has been detected in projectworlds Expense Management System 1.0. Affected is an unknown function of the file /public/admin/expense_categories/create of the component Expense Categories Page. Such manipulation leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used.
References
| Link | Resource |
|---|---|
| https://github.com/QIU-DIE/CVE/issues/12 | Exploit Issue Tracking |
| https://vuldb.com/?ctiid.329901 | Permissions Required VDB Entry |
| https://vuldb.com/?id.329901 | Third Party Advisory VDB Entry |
| https://vuldb.com/?submit.673708 | Third Party Advisory VDB Entry |
| https://github.com/QIU-DIE/CVE/issues/12 | Exploit Issue Tracking |
Configurations
History
28 Oct 2025, 02:17
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://github.com/QIU-DIE/CVE/issues/12 - Exploit, Issue Tracking | |
| References | () https://vuldb.com/?ctiid.329901 - Permissions Required, VDB Entry | |
| References | () https://vuldb.com/?id.329901 - Third Party Advisory, VDB Entry | |
| References | () https://vuldb.com/?submit.673708 - Third Party Advisory, VDB Entry | |
| First Time |
Projectworlds expense Management System
Projectworlds |
|
| CPE | cpe:2.3:a:projectworlds:expense_management_system:1.0:*:*:*:*:*:*:* |
27 Oct 2025, 16:15
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://github.com/QIU-DIE/CVE/issues/12 - |
27 Oct 2025, 06:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-10-27 06:15
Updated : 2025-10-28 02:17
NVD link : CVE-2025-12231
Mitre link : CVE-2025-12231
CVE.ORG link : CVE-2025-12231
JSON object : View
Products Affected
projectworlds
- expense_management_system