CVE-2025-1209

A vulnerability classified as problematic has been found in code-projects Wazifa System 1.0. Affected is the function searchuser of the file /search_resualts.php. The manipulation of the argument firstname/lastname leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. There is a typo in the affected file name.

• CWE-79
• CWE-94
• CWE-79

• https://code-projects.org/Product
• https://github.com/nanguawuming/CVE2/blob/main/cve2.pdfExploit, Third Party Advisory
• https://vuldb.com/?ctiid.295146Permissions Required, VDB Entry
• https://vuldb.com/?id.295146VDB Entry
• https://vuldb.com/?submit.497356VDB Entry

Published

Feb 12, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-12084When building nested elements using xml.dom.minidom methods …5.3
• CVE-2025-12085The ELEX WordPress HelpDesk & Customer Ticketing System plug…4.3
• CVE-2025-12086The Return Refund and Exchange For WooCommerce plugin for Wo…4.3
• CVE-2025-12087The Wishlist and Save for later for Woocommerce plugin for W…4.3
• CVE-2025-12088The Meta Display Block plugin for WordPress is vulnerable to…6.4
• CVE-2025-12089The Data Tables Generator by Supsystic plugin for WordPress …6.5
• CVE-2025-12090The Employee Spotlight – Team Member Showcase & Meet the Tea…6.4
• CVE-2025-12091The Search, Filters & Merchandising for WooCommerce plugin f…4.3
• CVE-2025-12092The CYAN Backup plugin for WordPress is vulnerable to arbitr…6.5
• CVE-2025-12093The Voidek Employee Portal plugin for WordPress is vulnerabl…5.3
• CVE-2025-12094The OOPSpam Anti-Spam: Spam Protection for WordPress Forms &…5.3
• CVE-2025-12095The Simple Registration for WooCommerce plugin for WordPress…8.8