CVE-2025-56697

Description

A Stored Cross-Site Scripting (XSS) vulnerability was discovered in the /users/adminpanel/admin/home.php?page=feedbacks file of Kashipara Computer Base Test v1.0. Attackers can inject malicious scripts via the smyFeedbacks POST parameter in /users/home.php.

PUBLISHED Reserved 2025-08-17 | Published 2025-09-16 | Updated 2025-09-16 | Assigner mitre

References

github.com/...ker/CVE/tree/main/Kashipara/Computer-Base-Test

cve.org (CVE-2025-56697)

nvd.nist.gov (CVE-2025-56697)

Download JSON