# CVE-2025-13583: A weakness has been identified in code-projects Question Paper Generator 1.0. This affects an unknown part of the file…

Source: https://junglewise.ai/threats/cve-2025-13583-a-weakness-has-been-identified-in-code-projects-question-paper  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2025-11-24  
License: CC BY 4.0 with a link back

CVE-2025-13583 · Severity: high · CVSS 7.3 · Published 2025-11-24

A weakness has been identified in code-projects Question Paper Generator 1.0. This affects an unknown part of the file /signupscript.php of the component POST Parameter Handler. Executing manipulation of the argument Fname can lead to sql injection. The attack can be executed remotely. The exploit has been made available to the public and could be exploited.

Vendors: [Carmelo](https://junglewise.ai/threats/vendors/carmelo).

## Quick answers

**Is CVE-2025-13583 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2025-13583 being exploited in the wild.

**How severe is CVE-2025-13583?** High severity, with a CVSS score of 7.3, published 24 November 2025.

**Which products and versions are affected?** Carmelo Question Paper Generator. The advisory does not name versions.

**Is there a fix for CVE-2025-13583?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**Am I affected by CVE-2025-13583?** Check whether you run Carmelo Question Paper Generator. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Affected products

- Carmelo Question Paper Generator

## Related threats

- [A flaw has been found in code-projects Question Paper Generator up to 1.0. This vulnerability affects unknown code of…](https://junglewise.ai/threats/cve-2025-14203-a-flaw-has-been-found-in-code-projects-question-paper-generator)