Cross-Site Scripting (XSS) vulnerability in SourceCodester "MatchMaster" 1.0 allows remote attackers to inject arbitrary web script or HTML via crafted input in the custom test creation feature. The vulnerability exists because the application fails to properly sanitize user-supplied input in test titles and matching pair items before rendering them in the DOM during test execution.
Metrics
Affected Vendors & Products
References
History
Fri, 07 Nov 2025 18:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Cross-Site Scripting (XSS) vulnerability in SourceCodester "MatchMaster" 1.0 allows remote attackers to inject arbitrary web script or HTML via crafted input in the custom test creation feature. The vulnerability exists because the application fails to properly sanitize user-supplied input in test titles and matching pair items before rendering them in the DOM during test execution. | |
| References |
|
Status: PUBLISHED
Assigner: mitre
Published: 2025-11-07T00:00:00.000Z
Updated: 2025-11-07T17:54:00.607Z
Reserved: 2025-10-27T00:00:00.000Z
Link: CVE-2025-63713
No data.
Status : Received
Published: 2025-11-07T18:15:36.373
Modified: 2025-11-07T18:15:36.373
Link: CVE-2025-63713
No data.