PT-2025-40890 · Langleyfcu · Langleyfcu Online Banking System

Mahushuai · Published 2025-10-06 · Updated 2025-10-06 · CVE-2025-11333

Positive Technologies (AI Summary)

CVSS v2.0

3.3

Low

Base vector

AV:N/AC:L/Au:M/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions langleyfcu Online Banking System versions prior to 57437e6400ce0ae240e692c24e6346b8d0c17d7a

Description A security issue exists in the langleyfcu Online Banking System. The manipulation of the First Name argument in the /customer add action.php file, within the Add Customer Page component, can lead to cross site scripting. The exploitation of this issue is possible remotely. The exploit is publicly available.

Recommendations Apply updates to versions prior to 57437e6400ce0ae240e692c24e6346b8d0c17d7a. Avoid using the First Name argument in the /customer add action.php file until the issue is resolved.

Exploit

Fix

XSS

Code Injection

Weakness Enumeration

CWE-79

CWE-94

Related Identifiers

CVE-2025-11333

Affected Products

Langleyfcu Online Banking System

References · 8

• 🔥 https://github.com/mhszed/Report/blob/main/online-banking-system-mastercustomer_home.php%20xss1.docx · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-11333 · Security Note
• https://vuldb.com/?id.327216 · Note
• https://t.me/CVEtracker/34239 · Telegram Post
• https://twitter.com/CVEnew/status/1975161037126324549 · Twitter Post
• https://vuldb.com/?submit.664562 · Note
• https://vuldb.com/?ctiid.327216 · Note
• https://t.me/cveNotify/137475 · Telegram Post