Vulnerability · Published Feb 11, 2025 · Assigned by VulDB
CVE-2025-1169SourceCodester Image Compressor Tool compressor.php cross site scripting
Low 3.5
In plain English
A low-severity cross-site scripting in Image Compressor Tool from SourceCodester. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 33% of all known vulnerabilities).
Official description
A vulnerability was found in SourceCodester Image Compressor Tool 1.0. It has been rated as problematic. This issue affects some unknown processing of the file /image-compressor/compressor.php. The manipulation of the argument image leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| SourceCodester | Image Compressor Tool | 1.0 |
Weakness: CWE-79, CWE-94 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
References
- VDB-295073 | SourceCodester Image Compressor Tool compressor.php cross site scripting vdb-entry, technical-description
- VDB-295073 | CTI Indicators (IOB, IOC, TTP, IOA) signature, permissions-required
- Submit #494775 | https://www.sourcecodester.com/php/17431/image-compressor-tool-u web 1 Open Redirect third-party-advisory
- https://www.sourcecodester.com/ product