A vulnerability, which was classified as problematic, was found in PHP Education Manager 1.0. This affects an unknown part of the file worksheet.php. The manipulation of the argument participant_name results in cross site scripting.
This vulnerability is known as CVE-2025-60781. It is possible to launch the attack remotely. No exploit is available.
