Exploitation Summary
EIP tracks 1 public exploit for CVE-2025-14221. PoCs published by fatmatrabelsi17.
AI-analyzed exploit summary This repository contains a writeup describing a Stored Cross-Site Scripting (XSS) vulnerability in the User Profile Update functionality of the Online Banking System 1.0 by SourceCodester. The vulnerability allows arbitrary JavaScript execution when malicious input is injected into the First Name field.
Description
A vulnerability was detected in SourceCodester Online Banking System 1.0. This impacts an unknown function of the file /?page=user. The manipulation of the argument First Name/Last Name results in cross site scripting. The attack can be launched remotely. The exploit is now public and may be used.
Exploits (1)
This repository contains a writeup describing a Stored Cross-Site Scripting (XSS) vulnerability in the User Profile Update functionality of the Online Banking System 1.0 by SourceCodester. The vulnerability allows arbitrary JavaScript execution when malicious input is injected into the First Name field.
References (5)
Scores
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N