Findings

CVE-2025-14205

A vulnerability was found in code-projects Chamber of Commerce Membership Management System 1.0.

Published Dec 8, 2025 · updated Oct 14, 2026 · fabian chamber of commerce membership management system

A vulnerability was found in code-projects Chamber of Commerce Membership Management System 1.0. Impacted is an unknown function of the file /membership_profile.php of the component Your Info Handler. Performing manipulation of the argument Full Name/Address/City/State results in cross site scripting. The attack is possible to be carried out remotely. The exploit has been made public and could be used.

Timeline

Detection, updates, and resolution for this record.

  1. Dec 8, 2025 · NIST NVD

    Detected

    A vulnerability was found in code-projects Chamber of Commerce Membership Management System 1.0. Impacted is an unknown function of the file /membership_profile.php of the component Your Info Handler. Performing manipulation of the argument Full Name/Address/City/State results in cross site scripting. The attack is possible to be carried out remotely. The exploit has been made public and could be

  2. Oct 14, 2026 · NIST NVD

    Updated

    A vulnerability was found in code-projects Chamber of Commerce Membership Management System 1.0. Impacted is an unknown function of the file /membership_profile.php of the component Your Info Handler. Performing manipulation of the argument Full Name/Address/City/State results in cross site scripting. The attack is possible to be carried out remotely. The exploit has been made public and could be

Affected

  • cpe fabian/chamber of commerce membership management system1.0

Sources

  • CVE.orgCVE-2025-14205

    Official CVE identifier

    cve.org
  • FIRST EPSSCVE-2025-14205

    30-day exploitation probability 0.2%

    first.org
  • NIST NVDCVE-2025-14205

    A vulnerability was found in code-projects Chamber of Commerce Membership Management System 1.0. Impacted is an unknown function of the file /membership_profile.php of the component Your Info Handler. Performing manipulation of the argument Full Name/Address/City/State results in

    nvd.nist.gov

References

CVE-2025-14205 · ZeroDay Findings