2025-08-26 00:00:00
mitre
PUBLISHED
A Stored Cross-Site Scripting (XSS) vulnerability in SourceCodester FAQ Management System 1.0 allows an authenticated attacker to inject malicious JavaScript into the question and answer fields via the update-faq.php endpoint.