CVE-2025-3822

Summary

CVE-2025-3822 is a newly disclosed vulnerability affecting the SourceCodester Web-based Pharmacy Product Management System 1.0. This issue carries a significant risk, as it allows for cross-site scripting (XSS) attacks. The vulnerability is located in the processing of the file changepassword.php and can be exploited by manipulating the arguments txtconfirm_password, txtnew_password, and txtold_password. An attacker can initiate these attacks remotely, making this a serious concern for system security. The exploit for this vulnerability has been made public, increasing the likelihood of its use in malicious activities.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.