CVE-2025-14221: SourceCodester Online Banking System page cross site scripting
A vulnerability was detected in SourceCodester Online Banking System 1.0. This impacts an unknown function of the file /?page=user. The manipulation of the argument First Name/Last Name results in cross site scripting. The attack can be launched remotely. The exploit is now public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-14221?
CVE-2025-14221 is classified as a cross-site scripting (XSS) vulnerability, which can pose significant security risks to users.
How do I fix CVE-2025-14221?
To fix CVE-2025-14221, you should validate and sanitize user inputs to prevent the execution of malicious scripts.
Who is affected by CVE-2025-14221?
CVE-2025-14221 affects users of SourceCodester Online Banking System version 1.0.
Can CVE-2025-14221 be exploited remotely?
Yes, CVE-2025-14221 can be exploited remotely due to its nature of cross-site scripting.
What part of the SourceCodester Online Banking System is vulnerable in CVE-2025-14221?
CVE-2025-14221 affects the manipulation of arguments in the /?page=user function, specifically the First Name/Last Name fields.