CVE-2025-12228
Cross-site scripting in Projectworlds Expense Management System
CVSS score
4.8
EPSS probability
%0.3
Risk score
0.0
Published
11 mo ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
Similar Vulnerabilities
9.8
CVE-2024-22922Improper privilege management in Projectworlds Visitor Management System
Patch status unknown Public Exploits:1EPSS %1
8.1
CVE-2024-22983SQL injection in Projectworlds Visitor Management System
Patch status unknown Public Exploits:1EPSS %1
9.1
CVE-2025-70146Missing authentication in Projectworlds Online Time Table Generator
Patch status unknown Public Exploits:1EPSS %1
9.8
CVE-2026-5368SQL injection in Projectworlds Car Rental Project
Patch status unknown Public Exploits:1EPSS %1
9.8
CVE-2025-12237SQL injection in Projectworlds Advanced Library Management System
Patch status unknown Public Exploits:1EPSS %0
9.8
CVE-2025-11070SQL injection in Projectworlds Online Shopping System
Patch status unknown Public Exploits:1EPSS %0
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2025-12228"