Medium severity4.6NVD Advisory· Published Nov 3, 2025· Updated Jun 17, 2026
CVE-2025-63442
CVE-2025-63442
Description
Simple User Management System with PHP-MySQL v1.0 is vulnerable to Cross-Site Scripting (XSS) via the Profile Section. The system fails to properly sanitize user input, allowing attackers to inject and execute arbitrary JavaScript when the input is displayed in the browser
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- Simple User Management System/Simple User Management Systemdescription
- Range: = 1.0
- cpe:2.3:a:nababur:simple-user-management-system:1.0:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
1- github.com/sanin-s1r3n/CVE-Research/blob/main/CVE-5nvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.