CVE-2025-13245 is a cross-site scripting (XSS) vulnerability in code-projects Student Information System 2.0, specifically in an unknown function within the /editprofile.php file. The vulnerability allows remote attackers to inject malicious scripts. Public exploit code is available, but the impact is limited to low severity with no confidentiality or availability impact reported.