Exploitation Summary
EIP tracks 1 public exploit for CVE-2025-50866. PoCs published by SacX-7.
AI-analyzed exploit summary The repository provides a detailed technical analysis of a reflected XSS vulnerability in CloudClassroom-PHP-Project 1.0, specifically in the email parameter of the postquerypublic endpoint. It includes reproduction steps and a crafted POST request demonstrating the exploit.
Description
CloudClassroom-PHP-Project 1.0 contains a reflected Cross-site Scripting (XSS) vulnerability in the email parameter of the postquerypublic endpoint. Improper sanitization allows an attacker to inject arbitrary JavaScript code that executes in the context of the user s browser, potentially leading to session hijacking or phishing attacks.
Exploits (1)
The repository provides a detailed technical analysis of a reflected XSS vulnerability in CloudClassroom-PHP-Project 1.0, specifically in the email parameter of the postquerypublic endpoint. It includes reproduction steps and a crafted POST request demonstrating the exploit.
References (1)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N