CVE-2025-0844

Name of the Vulnerable Software and Affected Versions needyamin Library Card System version 1.0

Description A problem was found in the needyamin Library Card System. It affects an unknown functionality of the file signup.php of the component Registration Page. The manipulation of the arguments firstname, lastname, email, borrow, user address leads to cross site scripting. The attack can be launched remotely. Other parameters might be affected as well.

Recommendations needyamin Library Card System version 1.0: Update the signup.php file in the Registration Page component to prevent the manipulation of the firstname, lastname, email, borrow, user address arguments, which lead to cross site scripting.