CVE-2025-3825: SourceCodester Web-based Pharmacy Product Management System add-category.php cross site scripting
A vulnerability, which was classified as problematic, has been found in SourceCodester Web-based Pharmacy Product Management System 1.0. Affected by this issue is some unknown functionality of the file add-category.php. The manipulation of the argument txtcategoryname leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-3825?
CVE-2025-3825 is classified as problematic due to its potential for cross-site scripting (XSS) attacks.
How do I fix CVE-2025-3825?
To fix CVE-2025-3825, validate and sanitize user inputs in the add-category.php file.
What type of attack does CVE-2025-3825 enable?
CVE-2025-3825 enables cross-site scripting (XSS) attacks targeting users of the Web-based Pharmacy Product Management System.
Which component of the SourceCodester Web-based Pharmacy Product Management System is affected by CVE-2025-3825?
CVE-2025-3825 affects the add-category.php file within the SourceCodester Web-based Pharmacy Product Management System.
What input parameter is exploited in CVE-2025-3825?
The input parameter exploited in CVE-2025-3825 is txtcategory_name.