Filtered by vendor Sourcecodester Subscriptions
Filtered by product Matchmaster Subscriptions
Total 1 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2025-63713 2 Remyandrade, Sourcecodester 2 Matching Type Test, Matchmaster 2025-11-18 6.1 Medium
Cross-Site Scripting (XSS) vulnerability in SourceCodester "MatchMaster" 1.0 allows remote attackers to inject arbitrary web script or HTML via crafted input in the custom test creation feature. The vulnerability exists because the application fails to properly sanitize user-supplied input in test titles and matching pair items before rendering them in the DOM during test execution.