Dashboard / CVE-2025-56289

CVE-2025-56289

MEDIUM
MEDIUM Priority: 0.01 BB Relevance: 51/100
Published: 2025-09-16 Modified: 2026-11-07 First seen: 2026-11-07 Status: active

Attack Surface

Network Low Complexity Scope Change

CVSS Vector Breakdown

AV: Network
AC: Low
PR: Low
UI: Required
S: Changed
C: Low
I: Low
A: None

Description

code-projects Document Management System 1.0 has a Cross Site Scripting (XSS) vulnerability, where attackers can leak admin's cookie information by entering malicious XSS code in the Company field when adding files.

Weakness Classification (1)

Affected Software (1)

VendorProductVersion
fabian document_management_system 1.0

References & Advisories (1)

Bug Bounty Relevance

51 / 100
✓ Network accessible
✓ Low complexity

CVSS Score

5.4 / 10.0 v3.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

EPSS — Exploitation Probability

0.17%
Raw Score 0.001700
Percentile 6.5%
Date 2026-11-13

EPSS Trend

2026-11-13
0.00170
2026-11-12
0.00170
2026-11-10
0.00170
2026-11-09
0.00170
2026-11-08
0.00170
2026-11-07
0.00170

Intelligence Sources

nvd ref →

External Links