CVE-2025-14221Low· 3.5▾ TwilightPoC availableA vulnerability was detected in SourceCodester Online Banking System 1.0. This impacts an unknown function of the file /?page=user. The manipulation of the argument First Name/Last Name results in cross site scripting. The attack can be …
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 19.3 · likelihood 0.1 · exploitation 12
A public proof-of-concept already exists for this vulnerability — see Exploit availability below.
Public exploit / PoC code seen in 1 source. Availability, not in-the-wild use.
Exploit-prediction probability, daily snapshots since Oct 7.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
0.3%
1 GitHub repo (last check)
A vulnerability was detected in SourceCodester Online Banking System 1.0. This impacts an unknown function of the file /?page=user. The manipulation of the argument First Name/Last Name results in cross site scripting. The attack can be launched remotely. The exploit is now public and may be used.
banking_system = 1.0Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2022-26644Medium· 6.1Online Banking System Protect v1.0 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities via parameters on user profile, system_info and accounts management.
CVE-2025-11601High· 7.3A vulnerability was detected in SourceCodester Online Student Result System 1.0
CVE-2025-12257High· 7.3A security vulnerability has been detected in SourceCodester Online Student Result System 1.0
CVE-2025-13264Medium· 6.3A security flaw has been discovered in SourceCodester Online Magazine Management System 1.0
CVE-2025-12929High· 7.3A flaw has been found in SourceCodester Survey Application System 1.0
CVE-2025-13263Medium· 6.3A vulnerability was identified in SourceCodester Online Magazine Management System 1.0