CVE-2025-1169 – SourceCodester Image Compressor Tool compressor.php cross site scripting

https://notcve.org/view.php?id=CVE-2025-1169

11 Feb 2025 — A vulnerability was found in SourceCodester Image Compressor Tool 1.0. It has been rated as problematic. This issue affects some unknown processing of the file /image-compressor/compressor.php. The manipulation of the argument image leads to cross site scripting. The attack may be initiated remotely. • https://vuldb.com/?ctiid.295073 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CWE-94: Improper Control of Generation of Code ('Code Injection') •