CVE-2025-60302

6.1 mediumEPSS 0.2%

Medium (6.1) in fabian client details system. EPSS 0.2% chance of exploitation in the next 30 days.

code-projects Client Details System 1.0 is vulnerable to Cross Site Scripting (XSS). When adding customer information, the client details system fills in malicious JavaScript code in the username field.

Severity

CVSS 3.1

6.1 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 13% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2025-10-09
Modified: 2026-07-05
Record from: the NVD, synced 2026-10-19

Affected

fabian:client_details_system

References

https://github.com/Chen1-Boop/CVE/blob/main/CVE-2025-60302.md

Check your stack JSON