CVE-2025-12224

LowCVSS 3.5/10Last modified Oct 8, 2026

Description

A flaw has been found in Iqbolshoh php-business-website up to 10677743a8dfc281f85291a27cf63a0bce043c24. This vulnerability affects unknown code of the file admin/contact.php. This manipulation of the argument twitter causes cross site scripting. The attack may be initiated remotely. The exploit has been published and may be used. This product uses a rolling release model to deliver continuous updates. As a result, specific version information for affected or updated releases is not available. Other parameters might be affected as well. The vendor was contacted early about this disclosure but did not respond in any way.

Metrics

CVSS 3.1 3.5/10CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N

Weakness enumeration

CWE-79 CWE-94

Affected software

No affected versions have been published.

Timeline

Published: Oct 27, 2025
Last modified: Oct 8, 2026
NVD status: Deferred

Related CVEs from 2025

CVE-2025-122258.8A vulnerability has been found in Tenda AC6 15.03.06.50. This issue affects some unknown processing of the file /goform/WifiGuestSet of the CVE-2025-122269.8A vulnerability was found in SourceCodester Best House Rental Management System 1.0. Impacted is the function save_house of the file /admin_CVE-2025-122275.4A vulnerability was determined in projectworlds Gate Pass Management System 1.0. The affected element is an unknown function of the file /ad CVE-2025-122284.8A vulnerability was identified in projectworlds Expense Management System 1.0. The impacted element is an unknown function of the file /publ CVE-2025-122294.8A security flaw has been discovered in projectworlds Expense Management System 1.0. This affects an unknown function of the file /public/adm CVE-2025-12236.1An attacker can gain application privileges in order to perform limited modification and/or read arbitrary data in Citrix Secure Access Clie CVE-2025-122304.8A weakness has been identified in projectworlds Expense Management System 1.0. This impacts an unknown function of the file /public/admin/cu CVE-2025-122314.8A security vulnerability has been detected in projectworlds Expense Management System 1.0. Affected is an unknown function of the file /publ CVE-2025-122329.8A vulnerability was detected in Tenda CH22 1.0.0.1. Affected by this vulnerability is the function fromSafeClientFilter of the file /goform/CVE-2025-122338.8A flaw has been found in Tenda CH22 1.0.0.1. Affected by this issue is the function fromSafeUrlFilter of the file /goform/SafeUrlFilter. Exe CVE-2025-122348.8A vulnerability has been found in Tenda CH22 1.0.0.1. This affects the function fromSafeMacFilter of the file /goform/SafeMacFilter. The man CVE-2025-122358.0A vulnerability was found in Tenda CH22 1.0.0.1. This vulnerability affects the function fromSetIpBind of the file /goform/SetIpBind. The ma