CVE-2025-10075

Name of the Vulnerable Software and Affected Versions SourceCodester Online Polling System version 1.0

Description A security flaw exists in SourceCodester Online Polling System 1.0. The issue is related to cross site scripting, triggered by manipulating the firstname argument of an unknown function within the /manage-profile.php file. This attack can be launched remotely. The exploit has been released publicly.

Recommendations Sanitize the firstname input to prevent the injection of malicious scripts. Restrict access to the /manage-profile.php file if possible. As a temporary workaround, consider disabling or restricting the use of the vulnerable function until a fix is available.