CVE-2025-12224

Name of the Vulnerable Software and Affected Versions Iqbolshoh php-business-website versions prior to 10677743a8dfc281f85291a27cf63a0bce043c24

Description A cross-site scripting issue exists in Iqbolshoh php-business-website. The issue is located in the admin/contact.php file, where manipulation of the twitter argument can trigger the flaw. The attack can be initiated remotely. The exploit has been published. The product uses a rolling release model, making specific version information for updates unavailable. Other parameters may also be affected. The vendor was contacted but did not respond.

Recommendations Update to a version prior to 10677743a8dfc281f85291a27cf63a0bce043c24.