CVE-2025-12244
MediumCVSS 4.3Exploitation Probability (EPSS)
Low risk32th percentile - higher than 32% of all known CVEs
Summary
A cross-site scripting (XSS) vulnerability was found in Simple E-Banking System 1.0 in the file /eBank/register.php. Manipulation of the Username argument allows injection of malicious script. The attack can be launched remotely and the exploit has been publicly disclosed.
Risk Assessment
An attacker can execute arbitrary JavaScript in the victim's browser, potentially stealing session or login data. Since the exploit is public, the risk of exploitation is high.
Recommendation
Update the system to the latest version or apply the vendor patch. Implement input validation and sanitization for the Username field and deploy a Content-Security-Policy header.
Other vulnerabilities in Simple E-Banking System
Original NVD description (English source)
A vulnerability was determined in code-projects Simple E-Banking System 1.0. This affects an unknown part of the file /eBank/register.php. Executing manipulation of the argument Username can lead to cross site scripting. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS