CVE Details
Basic Information
| Title | code-projects Church Donation System edit_members.php cross site scripting |
|---|---|
| Type | cve |
| Published | 2025-07-25T19:32:05.138Z |
| Modified | 2025-07-25T19:58:39.013Z |
Product Information
| Vendor | code-projects |
|---|---|
| Product | Church Donation System |
| Version | 1.0 |
CVSS Information
| Base Score | 5.1 (MEDIUM) |
|---|---|
| Attack Vector | CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P |
AI Analysis
| AI Description | A cross-site scripting (XSS) vulnerability in the Church Donation System 1.0 allows remote attackers to inject malicious scripts via the fname argument in /admin/edit_members.php. This could lead to session hijacking or unauthorized actions. |
|---|---|
| AI Severity | Medium |
| AI Vendor | code-projects |
| AI Product | Church Donation System |
| AI Version | 1.0 |
Affected Products
- code-projects Church Donation System 1.0
Additional Information
| CWE List | CWE-79, CWE-94 |
|---|---|
| Source | VulDB |
Description
A vulnerability was found in code-projects Church Donation System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/edit_members.php. The manipulation of the argument fname leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well.