EXPOSURES › CVE-2025-11347

CVE-2025-11347

HIGH

DETAIL

SourceNVD · cve Published2025-10-07 CVSS7.3 Referencehttps://nvd.nist.gov/vuln/detail/CVE-2025-11347 ↗

▸ RECOMMENDED ACTION Patch the affected products and confirm your instances are covered.

PLAYERS IMPLICATED

code-projects · vendor crud operation system · product

DESCRIPTION

A vulnerability was found in code-projects Student Crud Operation up to 3.3. This vulnerability affects the function move_uploaded_file of the file add.php of the component Add Student Page/Edit Student Page. Performing manipulation results in unrestricted upload. The attack can be initiated remotely. The exploit has been made public and could be used.

AFFECTED FEDRAMP PRODUCTS · 0

No correlated FedRAMP products.