CVE-2025-65337 — Sourcecodester Fantastic Blog CMS 1.0 is vulnerable to Cross Site Scripting (XSS) in pageEditMember.php via the address field

Back Back to CVE browser

MEDIUM

Sourcecodester Fantastic Blog CMS 1.0 is vulnerable to Cross Site Scripting (XSS) in pageEditMember.php via the address field

Published Jul 29, 2026

6.1

MEDIUM

CVSS 3.1

EPSS 0.26%

Description

Sourcecodester Fantastic Blog CMS 1.0 is vulnerable to Cross Site Scripting (XSS) in pageEditMember.php via the address field.

Affected products

Remediation

No remediation recorded yet.

Metrics

0.26% 0.00263

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 3, 2026.

EPSS probability 0.00263

Score over time

Jul–Oct 2026

EPSS v5

Percentile over time

EPSS v5

Table of values (2 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 3, 2026	0.26% (0.00263)	16.46th	v5 (v2026.06.15)
Jul 30, 2026	0.14% (0.00142)	4.00th	v5 (v2026.06.15)

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (2)

Link	Providers	Tags
https://github.com/um-dsp/TaintRadar/blob/main/XSS_cve/fantasticblog/XSS1.md		exploit
https://www.sourcecodester.com/php/12258/fantastic-blog-cms-php.html

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Jul 29, 2026

Updated Jul 30, 2026

Reserved Nov 18, 2025

Link CVE-2025-65337

CISA Vulnrichment

Updated Jul 30, 2026

NVD

Status Deferred

Modified Jul 30, 2026

Link CVE-2025-65337

Red Hat

Severity n/a

Public date n/a

Links CVE-2025-65337