What is CVE-2025-51411?

CVE-2025-51411 is a medium-severity vulnerability in Vishalmathur Institute-Of-Current-Students, classified under Cross-site Scripting. CVSS score: 6.1/10. Published 2025-07-25.

How severe is CVE-2025-51411?

Medium severity. CVSS v3 base score is 6.1 out of 10.

Is CVE-2025-51411 known to be exploited?

4 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

XSS in Vishalmathur Institute-Of-Current-Students

CVE-2025-51411

A reflected cross-site scripting (XSS) vulnerability exists in Institute-of-Current-Students v1.0 via the email parameter in the /postquerypublic endpoint. The application fails to properly sanitize user input before reflecting it in the HTML response. This allows unauthenticated attackers to inject and execute arbitrary JavaScript code in the context of the victim's browser by tricking them into visiting a crafted URL or submitting a malicious form. Successful exploitation may lead to session hijacking, credential theft, or other client-side attacks.

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.003 (24.7th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.1 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N.

Affected products

Vishalmathur Institute-of-current-students — versions 1.0
N/a — versions n/a

Weakness classification (CWE)

CWE-79 — Cross-site Scripting

Public proof-of-concept exploits

References

cve@mitre.org (Exploit, Third Party Advisory)

Frequently asked questions

What is CVE-2025-51411?: CVE-2025-51411 is a medium-severity vulnerability in Vishalmathur Institute-Of-Current-Students, classified under Cross-site Scripting. CVSS score: 6.1/10. Published 2025-07-25.
How severe is CVE-2025-51411?: Medium severity. CVSS v3 base score is 6.1 out of 10.
Is CVE-2025-51411 known to be exploited?: 4 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.