Medium severity6.1NVD Advisory· Published Nov 7, 2025· Updated Jun 17, 2026
CVE-2025-63713
CVE-2025-63713
Description
Cross-Site Scripting (XSS) vulnerability in SourceCodester "MatchMaster" 1.0 allows remote attackers to inject arbitrary web script or HTML via crafted input in the custom test creation feature. The vulnerability exists because the application fails to properly sanitize user-supplied input in test titles and matching pair items before rendering them in the DOM during test execution.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
31.0+ 1 more
- (no CPE)range: 1.0
- (no CPE)
- cpe:2.3:a:remyandrade:matching_type_test:1.0:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
2- github.com/floccocam-cpu/CVE-Research-2025/blob/main/CVE-2025-63713/README7.mdnvdExploitMitigationThird Party Advisory
- www.sourcecodester.com/javascript/18431/matching-type-test-using-html-css-and-javascript-source-code.htmlnvdProduct
News mentions
0No linked articles in our index yet.