216.73.216.204

CVE-2025-57425

· Published 26/08/2025 17:15 · Modified 26/08/2025 17:15

Labels: CVE-2025-57425 2025-08-26CVE-2025-57425[email protected]

Essential information

Published
26/08/2025 17:15
Modified
26/08/2025 17:15
Author
—
Creator
—
CISA KEV
No
CWE
—

Description

A Stored Cross-Site Scripting (XSS) vulnerability in SourceCodester FAQ Management System 1.0 allows an authenticated attacker to inject malicious JavaScript into the 'question' and 'answer' fields via the update-faq.php endpoint.

NVD status

Status
Received — CVE has been recently published to the CVE List and has been received by the NVD.
Source
[email protected]
NVD
View on NVD

Affected products (CPE)

ProductCPE
sourcecodester / faq management system cpe:2.3:a:sourcecodester:faq_management_system:1.0:*:*:*:*:*:*:*

References