CVE-2025-5628: SourceCodester Food Menu Manager Add Menu index.php cross site scripting
A vulnerability, which was classified as problematic, has been found in SourceCodester Food Menu Manager 1.0. Affected by this issue is some unknown functionality of the file /index.php of the component Add Menu Handler. The manipulation of the argument name/description leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-5628?
CVE-2025-5628 has been classified as problematic due to its potential for cross-site scripting attacks.
How do I fix CVE-2025-5628?
To fix CVE-2025-5628, sanitize and validate user inputs for the 'name' and 'description' parameters in the Add Menu Handler functionality.
What versions of SourceCodester Food Menu Manager are affected by CVE-2025-5628?
CVE-2025-5628 affects SourceCodester Food Menu Manager version 1.0.
What are the potential impacts of CVE-2025-5628?
The potential impacts of CVE-2025-5628 include the execution of arbitrary scripts within users' browsers, leading to unauthorized actions and data exposure.
Is CVE-2025-5628 being actively exploited?
As of now, there is no public information indicating active exploitation of CVE-2025-5628.