exploitDog

CVE-2025-4325

Опубликовано: 06 мая 2025

Источник: nvd

CVSS3: 2.4

CVSS2: 3.3

EPSS Низкий

Описание

A vulnerability has been found in MRCMS 3.1.2 and classified as problematic. This vulnerability affects unknown code of the file /admin/category/add.do of the component Category Management Page. The manipulation of the argument Name leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

Ссылки

https://github.com/bdkuzma/vuln/issues/6
Exploit
Issue Tracking
Third Party Advisory
https://vuldb.com/?ctiid.307426
Permissions Required
VDB Entry
https://vuldb.com/?id.307426
Third Party Advisory
VDB Entry
https://vuldb.com/?submit.563545
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:mrcms:mrcms:3.1.2:*:*:*:*:*:*:*

EPSS

Процентиль: 24%

0.00079

Низкий

2.4 Low

CVSS3

3.3 Low

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-9w6w-pc5p-c2cg

CVSS3: 2.4

github

9 месяцев назад

A vulnerability has been found in MRCMS 3.1.2 and classified as problematic. This vulnerability affects unknown code of the file /admin/category/add.do of the component Category Management Page. The manipulation of the argument Name leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

EPSS

Процентиль: 24%

0.00079

Низкий

2.4 Low

CVSS3

3.3 Low

CVSS2

Дефекты

CWE-79