CVE-2025-29015: XSS
Published Apr 17, 2025
·Updated
Code Astro Internet Banking System 2.0.0 is vulnerable to Cross Site Scripting (XSS) via the name parameter in /admin/pagesaccount.php.
Affected Software
2 affected components
Code Astro Internet Banking System
Codeastro Internet Banking System=2.0
Event History
Apr 17, 2025
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·02:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2025-29015?
CVE-2025-29015 is classified as a high-severity Cross Site Scripting (XSS) vulnerability.
2
How do I fix CVE-2025-29015?
To fix CVE-2025-29015, sanitize and validate the input for the name parameter in /admin/pages_account.php to prevent XSS attacks.
3
What software is affected by CVE-2025-29015?
CVE-2025-29015 affects Code Astro Internet Banking System version 2.0.0.
4
What type of attack can occur with CVE-2025-29015?
CVE-2025-29015 allows attackers to execute malicious scripts in the context of the user's browser via a Cross Site Scripting (XSS) attack.
5
Is there a patch available for CVE-2025-29015?
As of now, there is no specific patch released for CVE-2025-29015, so users should implement input validation as a workaround.