CVE-2025-63714

MEDIUM 6.1CVE-2025-63714 · Published 07/11/2025 · updated 17/06/2026

In short

CVE-2025-63714 is a MEDIUM (CVSS 6.1) vulnerability affecting modern user account generator (remyandrade).
Chance of exploitation in the next 30 days (EPSS): 0.28%, higher than 20.9% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
modern user account generator remyandrade	`= 1.0`	No fix yet

Description

Cross-Site Scripting (XSS) vulnerability in SourceCodester User Account Generator 1.0 allows remote attackers to execute arbitrary JavaScript code in the context of the user's browser session via crafted input in the Username Prefix field. The vulnerability exists due to improper sanitization of user-supplied input when rendering generated account data to the DOM, allowing persistent injection of malicious HTML elements that execute when clicked by users.

References

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free