CVE-2025-8167: code-projects Church Donation System edit_members.php cross site scripting
A vulnerability was found in code-projects Church Donation System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/editmembers.php. The manipulation of the argument fname leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-8167?
CVE-2025-8167 is classified as a cross-site scripting vulnerability, which can lead to potential security risks for affected systems.
How do I fix CVE-2025-8167?
To fix CVE-2025-8167, you need to sanitize user inputs in the /admin/edit_members.php file to prevent malicious script execution.
What is affected by CVE-2025-8167?
CVE-2025-8167 affects the Code-projects Church Donation System 1.0, specifically the functionality within /admin/edit_members.php.
What is cross-site scripting in relation to CVE-2025-8167?
In the context of CVE-2025-8167, cross-site scripting allows attackers to inject malicious scripts into web pages viewed by other users.
Can CVE-2025-8167 be exploited remotely?
Yes, CVE-2025-8167 can be exploited remotely if an attacker can manipulate the fname parameter in the affected file.