CVE-2025-65337 identifies a Cross Site Scripting (XSS) vulnerability in Sourcecodester Fantastic Blog CMS 1.0, specifically in the pageEditMember.php file through the address field. This vulnerability arises from improper input validation or output encoding, enabling an attacker to inject malicious scripts that could execute in the context of a victim's browser. The CVE record does not provide a CVSS score, vendor advisory, or patch information. No known exploits have been reported. The vulnerability is limited to the specified CMS version and component.

Successful exploitation of this XSS vulnerability could allow an attacker to execute arbitrary scripts in the context of users interacting with the vulnerable page, potentially leading to session hijacking, defacement, or other client-side attacks. However, no known exploits in the wild have been reported, and the impact is limited to the affected CMS version and page.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider applying input validation or output encoding workarounds on the address field in pageEditMember.php to mitigate XSS risks. Monitoring vendor channels for updates is recommended.