CVE-2025-65337 identifies a Cross Site Scripting (XSS) vulnerability in Sourcecodester Fantastic Blog CMS 1.0. The vulnerability exists in the pageEditMember.php file, specifically through the address field, which does not properly sanitize user input. This flaw could allow an attacker to inject malicious scripts that execute in the victim's browser, potentially leading to limited confidentiality and integrity impacts. The vulnerability requires user interaction (UI:R) and can be exploited remotely (AV:N) without privileges (PR:N). The vulnerability affects exactly version 1.0 of the product. No vendor advisory or patch information is currently available.

Successful exploitation of this XSS vulnerability could allow an attacker to execute arbitrary scripts in the context of the victim's browser session, potentially leading to limited disclosure of information and modification of data accessible to the user. There is no impact on availability. The vulnerability requires user interaction and can be exploited remotely without authentication.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should exercise caution when interacting with untrusted content in the affected application. No official remediation or temporary fix has been published.