A vulnerability was determined in code-projects Student Information System 2.0. The affected element is an unknown function of the file /register.php. This manipulation causes cross site scripting. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized.

References

• https://nvd.nist.gov/vuln/detail/CVE-2025-13244
• https://code-projects.org
• https://github.com/asd1238525/cve/blob/main/xss6.md
• https://vuldb.com/?ctiid.332570
• https://vuldb.com/?id.332570
• https://vuldb.com/?submit.687529