Cross Site Scripting Vulnerability in Sourcecodester Fantastic Blog CMS
CVE-2025-65337

6.1MEDIUM

Key Information:

Vendor

Sourcecodester
Status
Fantastic Blog CMS
Vendor
CVE Published:
29 July 2026

What is CVE-2025-65337?

The Sourcecodester Fantastic Blog CMS version 1.0 presents a Cross Site Scripting (XSS) vulnerability in the pageEditMember.php file. This security flaw allows attackers to inject malicious scripts through the address field, which can be executed in the context of the user's browser. Exploitation of this vulnerability could lead to unauthorized access to sensitive information, altering user experience, or launching further attacks. Website administrators are urged to apply necessary patches and ensure that input validation mechanisms are in place to mitigate this security risk.

References

https://www.sourcecodester.com/php/12258/fantastic-blog-c...
https://github.com/um-dsp/TaintRadar/blob/main/XSS_cve/fa...

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.