CVE-2025-12228 | projectworlds Expense Management System 1.0 Users Page create cross site scripting

October 25, 2025 Yanac

A vulnerability, which was classified as problematic, has been found in projectworlds Expense Management System 1.0. The impacted element is an unknown function of the file /public/admin/users/create of the component Users Page. The manipulation leads to cross site scripting.

This vulnerability is uniquely identified as CVE-2025-12228. The attack is possible to be carried out remotely. Moreover, an exploit is present.VulDB Recent EntriesRead More