A vulnerability identified as problematic has been detected in ProjectsAndPrograms School Management System 1.0. The impacted element is an unknown function of the file themeSet.php of the component POST Parameter Handler. This manipulation causes cross site scripting.

This vulnerability is tracked as CVE-2025-51967. The attack is possible to be carried out remotely. No exploit exists.