Description
A Stored Cross-Site Scripting (XSS) vulnerability in SourceCodester FAQ Management System 1.0 allows an authenticated attacker to inject malicious JavaScript into the 'question' and 'answer' fields via the update-faq.php endpoint.
Medium · 6.1
CVE-2025-57425
EUVD-2025-25905GHSA-x48p-m2p4-gh79
A Stored Cross-Site Scripting (XSS) vulnerability in SourceCodester FAQ Management System 1.0 allows an authenticated attacker to inject ma…
Published Aug 26, 2025 · Updated Aug 27, 2025 · Assigned by mitre