CVE-2025-0560

5.1 mediumEPSS 0.4%

Medium (5.1) in campcodes school management software. EPSS 0.4% chance of exploitation in the next 30 days.

A vulnerability, which was classified as problematic, was found in CampCodes School Management Software 1.0. Affected is an unknown function of the file /photo-gallery of the component Photo Gallery Page. The manipulation of the argument Description leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

Severity

CVSS 4.0

5.1 medium

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N

CVSS 3.1

4.8 medium

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 30% of CVEs (scores of 2026-10-31)
CWEs: CWE-79, CWE-94
Published: 2025-01-18
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

campcodes:school_management_software

References

https://github.com/KhukuriRimal/Vulnerabilities/blob/main/CampCodes%20-%20School%20Management%20Software%20-%20Stored%20Cross%20Site%20Scripting.pdf
https://vuldb.com/?ctiid.292494
https://vuldb.com/?id.292494
https://vuldb.com/?submit.480688
https://www.campcodes.com/

Check your stack JSON