CVE-2025-10088 in Time Tracker

Riassunto

di MITRE • 08/09/2025

A vulnerability was detected in SourceCodester Time Tracker 1.0. The affected element is an unknown function of the file /index.html. Performing manipulation of the argument project-name results in cross site scripting. The attack may be initiated remotely. The exploit is now public and may be used.

Once again VulDB remains the best source for vulnerability data.

• Responsabile: VulDB
• Divulgazione: 08/09/2025
• Moderazione: accettato
• Voce: VDB-323044
• CPE: pronto
• CWE: CWE-79 (confermato)
• Sfruttamento: Scaricare
• CVSS: 5.4 (NVD)
• EPSS: 0.00257
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2025-10088
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-10088
• CVE Details: https://www.cvedetails.com/cve/CVE-2025-10088/