CVE-2025-29710

Summary

CVE-2025-29710 is a Cross-Site Scripting (XSS) vulnerability affecting the SourceCodester Company Website CMS 1.0. Attackers can exploit this flaw by injecting malicious scripts into the /dashboard/Services page, potentially stealing user data or taking control of their sessions. Websites using this outdated CMS are at risk of data breaches and should apply the necessary patches as soon as possible to mitigate this threat. This XSS vulnerability could lead to serious consequences, including identity theft and unauthorized access to sensitive information.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.