CVE-2025-29015: Codeastro Internet Banking System

Medium severity, CVSS 6.1. EPSS: 0.3% chance of exploitation in the next 30 days.

Code Astro Internet Banking System 2.0.0 is vulnerable to Cross Site Scripting (XSS) via the name parameter in /admin/pages_account.php.

Affected products

• Codeastro Internet Banking System: version 2.0 only

Published 2025-04-17. Last modified 2026-06-17.