CVE-2025-57425 — n/a / n/a

Description (CNA)

A Stored Cross-Site Scripting (XSS) vulnerability in SourceCodester FAQ Management System 1.0 allows an authenticated attacker to inject malicious JavaScript into the 'question' and 'answer' fields via the update-faq.php endpoint.

Affected (CNA)

Vendor / product	Versions
n/a / n/a	affected n/a

CWE

No CWE identifiers supplied.

References

https://gist.github.com/progprnv/10110b20469e4ae02aa1c9bfe130f5e9

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.