CVE-2025-6345
SourceCodester My Food Recipe Add Recipe Page add-recipe.php addRecipeModal cross site scripting
- State
- Published
- Severity
- 5.1 Medium
- Published
- Jun 20, 2025
- Updated
- Jun 23, 2025
- Reserved
- Jun 19, 2025
Description
A vulnerability was found in SourceCodester My Food Recipe 1.0 and classified as problematic. Affected by this issue is the function addRecipeModal of the file /endpoint/add-recipe.php of the component Add Recipe Page. The manipulation of the argument Name leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 5.1 Medium | CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P | VulDB |
| 3.1 | 3.5 Low | CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N/E:P/RL:X/RC:R | VulDB |
| 3.0 | 3.5 Low | CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N/E:P/RL:X/RC:R | VulDB |
| 2.0 | 4.0 Medium | AV:N/AC:L/Au:S/C:N/I:P/A:N/E:POC/RL:ND/RC:UR | VulDB |
Weaknesses
Affected Products
| Product | Versions |
|---|---|
My Food RecipeSourceCodester |
|
References
- VDB-313340 | SourceCodester My Food Recipe Add Recipe Page add-recipe.php addRecipeModal cross site scriptingvdb-entrytechnical-description
- VDB-313340 | CTI Indicators (IOB, IOC, TTP, IOA)signaturepermissions-required
- Submit #597093 | SourceCodester My Food Recipe 1.0 Stored Cross Site Scriptingthird-party-advisory
- https://github.com/RaulPazemecxas/PoCVulDb/blob/main/README4.mdexploit
- https://www.sourcecodester.com/product
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.