CVE-2025-15134 | yourmaileyes MOOC up to 1.17 Submission MainController.java subreview cross site scripting (Issue 12)

A vulnerability was found in yourmaileyes MOOC up to 1.17. It has been classified as problematic. This affects the function subreview of the file mooc/controller/MainController.java of the component Submission Handler. Performing manipulation of the argument review results in cross site scripting.

This vulnerability is identified as CVE-2025-15134. The attack can be initiated remotely. Additionally, an exploit exists.

The project was informed of the problem early through an issue report but has not responded yet.