CVE-2025-14205: code-projects Chamber of Commerce Membership Management System Your Info membership_profile.php cross site scripting
A vulnerability was found in code-projects Chamber of Commerce Membership Management System 1.0. Impacted is an unknown function of the file /membershipprofile.php of the component Your Info Handler. Performing manipulation of the argument Full Name/Address/City/State results in cross site scripting. The attack is possible to be carried out remotely. The exploit has been made public and could be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-14205?
The severity of CVE-2025-14205 is currently categorized as high due to the potential for unauthorized access and data manipulation.
How do I fix CVE-2025-14205?
To fix CVE-2025-14205, ensure to validate and sanitize all input fields in the /membership_profile.php file to prevent injection attacks.
Is CVE-2025-14205 a remote or local vulnerability?
CVE-2025-14205 is classified as a remote vulnerability that can be exploited without physical access to the system.
What versions are affected by CVE-2025-14205?
CVE-2025-14205 affects the Code-projects Chamber of Commerce Membership Management System version 1.0.
Can CVE-2025-14205 lead to data leakage?
Yes, CVE-2025-14205 can potentially lead to data leakage if the vulnerability is exploited to manipulate user information.