CVE-2025-6778: code-projects Food Distributor Site save_settings.php cross site scripting
A vulnerability, which was classified as problematic, was found in code-projects Food Distributor Site 1.0. Affected is an unknown function of the file /admin/savesettings.php. The manipulation of the argument sitephone/siteemail/address leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-6778?
CVE-2025-6778 is classified as a problematic vulnerability due to its potential for cross site scripting.
How do I fix CVE-2025-6778?
To fix CVE-2025-6778, you should sanitize and validate user input in the affected parameters site_phone, site_email, and address.
What specific file is affected by CVE-2025-6778?
The affected file in CVE-2025-6778 is /admin/save_settings.php.
What type of attack does CVE-2025-6778 enable?
CVE-2025-6778 enables cross site scripting (XSS) attacks.
Which software is affected by CVE-2025-6778?
CVE-2025-6778 affects the Code-projects Food Distributor Site version 1.0.