CVE-2025-29018: XSS
Published Apr 9, 2025
·Updated
A Stored Cross-Site Scripting (XSS) vulnerability exists in the name parameter of pagesaddacctype.php in Code Astro Internet Banking System 2.0.0.
Affected Software
2 affected components
Code Astro Internet Banking System
Codeastro Internet Banking System=2.0.0
Event History
Apr 9, 2025
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·09:16 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-29018?
CVE-2025-29018 is classified as a high severity Stored Cross-Site Scripting (XSS) vulnerability.
2
How do I fix CVE-2025-29018?
To fix CVE-2025-29018, ensure that user input is properly sanitized and validated before being processed.
3
What systems are affected by CVE-2025-29018?
CVE-2025-29018 affects Code Astro Internet Banking System version 2.0.0.
4
What can attackers do with CVE-2025-29018?
Attackers can exploit CVE-2025-29018 to inject malicious scripts that can steal user data or perform actions on behalf of the user.
5
How can I verify if my system is vulnerable to CVE-2025-29018?
You can verify if your system is vulnerable to CVE-2025-29018 by checking if the name parameter in pages_add_acc_type.php accepts unvalidated input.