CVE-2025-41107 | QDOCS Smart School 7.0 Query /online_admission firstname/lastname/guardian_name cross site scripting

A vulnerability was found in QDOCS Smart School 7.0. It has been rated as problematic. The affected element is an unknown function of the file /online_admission of the component Query Handler. The manipulation of the argument firstname/lastname/guardian_name leads to cross site scripting.

This vulnerability is uniquely identified as CVE-2025-41107. The attack is possible to be carried out remotely. No exploit exists.