CVE-2025-57425: XSS
A Stored Cross-Site Scripting (XSS) vulnerability in SourceCodester FAQ Management System 1.0 allows an authenticated attacker to inject malicious JavaScript into the 'question' and 'answer' fields via the update-faq.php endpoint.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-57425?
The severity of CVE-2025-57425 is classified as medium, due to its potential for exploitation in a web application environment.
How do I fix CVE-2025-57425?
To fix CVE-2025-57425, ensure that user input is sanitized and encoded correctly in the 'question' and 'answer' fields to prevent XSS.
Who is affected by CVE-2025-57425?
CVE-2025-57425 affects users of SourceCodester FAQ Management System version 1.0 that have the update-faq.php endpoint exposed.
What type of vulnerability is CVE-2025-57425?
CVE-2025-57425 is a Stored Cross-Site Scripting (XSS) vulnerability.
How can an attacker exploit CVE-2025-57425?
An attacker can exploit CVE-2025-57425 by injecting malicious JavaScript into the 'question' and 'answer' fields, which may then be executed in the context of other users.