← Database

CVE-2025-25957

MEDIUM CVSS: 6.1 Published: 2025-02-20 Modified: 2026-06-17

Description

Cross Site Scripting vulnerabilities in Xunruicms v.4.6.3 and before allows a remote attacker to escalate privileges via a crafted script.

Affected Platforms

Xunruicms Xunruicms

Weakness Type

CWE-79

References