CVE-2025-70458: XSS
A DOM-based Cross-Site Scripting (XSS) vulnerability exists in the DomainCheckerApp class within domain/script.js of Sourcecodester Domain Availability Checker v1.0. The vulnerability occurs because the application improperly handles user-supplied data in the createResultElement method by using the unsafe innerHTML property to render domain search results.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-70458?
The severity of CVE-2025-70458 is considered medium due to its potential for exploitation via DOM-based Cross-Site Scripting.
How do I fix CVE-2025-70458?
To fix CVE-2025-70458, ensure that user-supplied data is properly sanitized and validated before being processed in the createResultElement method.
What software is affected by CVE-2025-70458?
CVE-2025-70458 affects Sourcecodester Domain Availability Checker v1.0.
What type of vulnerability is CVE-2025-70458?
CVE-2025-70458 is classified as a DOM-based Cross-Site Scripting (XSS) vulnerability.
What is the impact of exploiting CVE-2025-70458?
Exploiting CVE-2025-70458 allows attackers to execute arbitrary JavaScript code in the context of the victim's browser.