Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
es: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.307402 - https://vuldb.com/?ctiid.307402 - https://vuldb.com/?submit.563557 - https://github.com/CH13hh/tmp_store_cc/blob/main/AC1206/AC1206formSetCfm/formSetCfm.md - https://www.tenda.com.cn/
CVE ID: CVE-2025-4299 State: PUBLISHED Published: 2025-05-06T00:00:07.726Z Last Updated: 2025-05-06T13:40:44.930Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C) Vendors: Tenda Products: AC1206 Problem Types: CWE-120, CWE-119 Description: A vulnerability was found in Tenda AC1206 up to 15.03.06.23. It has been rated as critical. This issue affects the function setSchedWifi of the file /goform/openSchedWifi. The manipulation leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.307403 - https://vuldb.com/?ctiid.307403 - https://vuldb.
: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.307403 - https://vuldb.com/?ctiid.307403 - https://vuldb.com/?submit.563558 - https://github.com/CH13hh/tmp_store_cc/blob/main/AC1206/AC1206setSchedWifi/setSchedWifi.md - https://www.tenda.com.cn/
CVE ID: CVE-2025-4300 State: PUBLISHED Published: 2025-05-06T00:00:10.110Z Last Updated: 2025-05-06T13:36:30.665Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: itsourcecode Products: Content Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical has been found in itsourcecode Content Management System 1.0. Affected is an unknown function of the file /search_list.php. The manipulation of the argument Search leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.307404 - ht
blic and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.307404 - https://vuldb.com/?ctiid.307404 - https://vuldb.com/?submit.563623 - https://github.com/6BXK6/cve/issues/1 - https://itsourcecode.com/
CVE ID: CVE-2025-4301 State: PUBLISHED Published: 2025-05-06T00:31:04.712Z Last Updated: 2025-05-06T13:35:40.704Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: itsourcecode Products: Content Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical was found in itsourcecode Content Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /search-notice.php. The manipulation of the argument searchdata leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.
disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.307405 - https://vuldb.com/?ctiid.307405 - https://vuldb.com/?submit.563625 - https://github.com/6BXK6/cve/issues/2 - https://itsourcecode.com/
CVE ID: CVE-2025-4302 State: PUBLISHED Published: 2025-07-17T07:37:11.729Z Last Updated: 2025-07-17T13:36:10.039Z Vendors: Unknown Products: Stop User Enumeration Problem Types: CWE-203 Observable Discrepancy Description: The Stop User Enumeration WordPress plugin before version 1.7.3 blocks REST API /wp-json/wp/v2/users/ requests for non-authorized users. However, this can be bypassed by URL-encoding the API path. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/19f67d6e-4ffe-4126-ac42-fb23c5017a3e
CVE ID: CVE-2025-4303 State: PUBLISHED Published: 2025-05-06T01:00:07.890Z Last Updated: 2025-05-06T02:42:20.939Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PHPGurukul Products: Human Metapneumovirus Testing Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, has been found in PHPGurukul Human Metapneumovirus Testing Management System 1.0. Affected by this issue is some unknown functionality of the file /add-phlebotomist.php. The manipulation of the argument empid leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CI
k may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.307406 - https://vuldb.com/?ctiid.307406 - https://vuldb.com/?submit.563706 - https://github.com/eneover/myCVE/issues/1 - https://phpgurukul.com/
CVE ID: CVE-2025-4304 State: PUBLISHED Published: 2025-05-06T01:31:05.143Z Last Updated: 2025-05-06T02:40:01.354Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PHPGurukul Products: Cyber Cafe Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, was found in PHPGurukul Cyber Cafe Management System 1.0. This affects an unknown part of the file /adminprofile.php. The manipulation of the argument mobilenumber leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. Additional Analyst Notes: - CISA ADP Vu
losed to the public and may be used. Other parameters might be affected as well. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.307407 - https://vuldb.com/?ctiid.307407 - https://vuldb.com/?submit.563723 - https://github.com/3507998897/myCVE/issues/3 - https://phpgurukul.com/
CVE ID: CVE-2025-4305 State: PUBLISHED Published: 2025-05-06T01:31:06.711Z Last Updated: 2025-05-06T02:38:58.366Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: kefaming Products: mayi Problem Types: CWE-434, CWE-284 Description: A vulnerability has been found in kefaming mayi up to 1.3.9 and classified as critical. This vulnerability affects the function Upload of the file app/tools/controller/File.php. The manipulation of the argument File leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.307408 - https://vuldb.
be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.307408 - https://vuldb.com/?ctiid.307408 - https://vuldb.com/?submit.563784 - https://github.com/caigo8/CVE-md/blob/main/%E8%9A%82%E8%9A%81%E6%88%90%E7%BB%A9%E7%AE%A1%E7%90%86%E7%B3%BB%E7%BB%9F/%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E4%B8%8A%E4%BC%A0RCE.md
CVE ID: CVE-2025-4306 State: PUBLISHED Published: 2025-05-06T02:00:07.924Z Last Updated: 2025-05-06T02:34:23.602Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PHPGurukul Products: Nipah Virus Testing Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in PHPGurukul Nipah Virus Testing Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /edit-phlebotomist.php. The manipulation of the argument mobilenumber leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. Additional Analyst N
ploit has been disclosed to the public and may be used. Other parameters might be affected as well. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.307409 - https://vuldb.com/?ctiid.307409 - https://vuldb.com/?submit.564120 - https://github.com/xiguala123/myCVE/issues/3 - https://phpgurukul.com/
CVE ID: CVE-2025-4307 State: PUBLISHED Published: 2025-05-06T02:00:11.730Z Last Updated: 2025-05-06T02:35:10.170Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PHPGurukul Products: Art Gallery Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in PHPGurukul Art Gallery Management System 1.1. It has been classified as critical. Affected is an unknown function of the file /admin/add-art-medium.php. The manipulation of the argument artmed leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuld
n disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.307410 - https://vuldb.com/?ctiid.307410 - https://vuldb.com/?submit.564179 - https://github.com/3507998897/myCVE/issues/4 - https://phpgurukul.com/
CVE ID: CVE-2025-4308 State: PUBLISHED Published: 2025-05-06T02:31:05.284Z Last Updated: 2025-05-06T13:33:52.032Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PHPGurukul Products: Art Gallery Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in PHPGurukul Art Gallery Management System 1.1. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/add-art-type.php. The manipulation of the argument arttype leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References:
exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.307411 - https://vuldb.com/?ctiid.307411 - https://vuldb.com/?submit.564188 - https://github.com/3507998897/myCVE/issues/5 - https://phpgurukul.com/
CVE ID: CVE-2025-4309 State: PUBLISHED Published: 2025-05-06T03:00:07.910Z Last Updated: 2025-05-06T14:48:42.715Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PHPGurukul Products: Art Gallery Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in PHPGurukul Art Gallery Management System 1.1. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/add-art-type.php. The manipulation of the argument arttype leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https:
as been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.307412 - https://vuldb.com/?ctiid.307412 - https://vuldb.com/?submit.564207 - https://github.com/lierran1/CVE/issues/3 - https://phpgurukul.com/
CVE ID: CVE-2025-4310 State: PUBLISHED Published: 2025-05-06T03:31:04.246Z Last Updated: 2025-05-06T14:22:25.818Z Severity: N/A (CVSS 5.8 AV:N/AC:L/Au:M/C:P/I:P/A:P) Vendors: itsourcecode Products: Content Management System Problem Types: CWE-434, CWE-284 Description: A vulnerability classified as critical has been found in itsourcecode Content Management System 1.0. This affects an unknown part of the file /admin/add_topic.php?category=BBS. The manipulation of the argument Cover Image leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http
has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.307413 - https://vuldb.com/?ctiid.307413 - https://vuldb.com/?submit.564206 - https://github.com/ZhaoxuepengS/CVE-vul/issues/1 - https://itsourcecode.com/
CVE ID: CVE-2025-4311 State: PUBLISHED Published: 2025-05-06T04:00:07.626Z Last Updated: 2025-05-06T14:21:36.131Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: itsourcecode Products: Content Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical was found in itsourcecode Content Management System 1.0. This vulnerability affects unknown code of the file /admin/update_main_topic_img.php?topic_id=529. The manipulation of the argument stopic_id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https:
as been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.307414 - https://vuldb.com/?ctiid.307414 - https://vuldb.com/?submit.564230 - https://github.com/ZhaoxuepengS/CVE-vul/issues/2 - https://itsourcecode.com/
CVE ID: CVE-2025-4312 State: PUBLISHED Published: 2025-05-06T04:00:10.174Z Last Updated: 2025-05-06T14:20:46.489Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: SourceCodester Products: Advanced Web Store Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, has been found in SourceCodester Advanced Web Store 1.0. This issue affects some unknown processing of the file /productdetail.php. The manipulation of the argument prodid leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.3074
the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.307415 - https://vuldb.com/?ctiid.307415 - https://vuldb.com/?submit.564301 - https://github.com/Samsamue1/CVE/issues/1 - https://www.sourcecodester.com/
CVE ID: CVE-2025-4313 State: PUBLISHED Published: 2025-05-06T04:31:05.351Z Last Updated: 2025-05-06T14:44:10.883Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: SourceCodester Products: Advanced Web Store Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, was found in SourceCodester Advanced Web Store 1.0. Affected is an unknown function of the file /admin/admin_addnew_product.php. The manipulation of the argument txtProdId leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/
losed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.307416 - https://vuldb.com/?ctiid.307416 - https://vuldb.com/?submit.564311 - https://github.com/Samsamue1/CVE/issues/2 - https://www.sourcecodester.com/
CVE ID: CVE-2025-4314 State: PUBLISHED Published: 2025-05-06T04:31:07.590Z Last Updated: 2025-05-06T14:05:05.619Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: SourceCodester Products: Advanced Web Store Problem Types: CWE-89, CWE-74 Description: A vulnerability has been found in SourceCodester Advanced Web Store 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/index.php. The manipulation of the argument txtLogin leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?
osed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.307417 - https://vuldb.com/?ctiid.307417 - https://vuldb.com/?submit.564314 - https://github.com/Samsamue1/CVE/issues/3 - https://www.sourcecodester.com/
CVE ID: CVE-2025-4315 State: PUBLISHED Published: 2025-06-11T09:22:33.437Z Last Updated: 2025-06-11T13:13:44.603Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: cubewp1211 Products: CubeWP – All-in-One Dynamic Content Framework Problem Types: CWE-269 Description: The CubeWP – All-in-One Dynamic Content Framework plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.1.23. This is due to the plugin allowing a user to update arbitrary user meta through the update_user_meta() function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to elevate their privileges to that of an a
ossible for authenticated attackers, with Subscriber-level access and above, to elevate their privileges to that of an administrator. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/430b7e72-72b8-4cf8-99f4-ee1d1d4b4f24?source=cve - https://plugins.trac.wordpress.org/browser/cubewp-framework/tags/1.1.23/cube/classes/class-cubewp-rest-api.php#L691 - https://plugins.trac.wordpress.org/changeset/3306925/cubewp-framework#file2
CVE ID: CVE-2025-4316 State: PUBLISHED Published: 2025-05-05T14:00:50.110Z Last Updated: 2025-05-14T12:32:48.526Z Vendors: Devolutions Products: Server Problem Types: CWE-284 Description: Improper access control in PAM feature in Devolutions Server allows a PAM user to self approve their PAM requests even if disallowed by the configured policy via specific user interface actions. This issue affects Devolutions Server versions from 2025.1.3.0 through 2025.1.6.0, and all versions up to 2024.3.15.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://devolutions.net/security/advisories/DEVO-2025-0007/
CVE ID: CVE-2025-4317 State: PUBLISHED Published: 2025-05-13T06:40:55.865Z Last Updated: 2025-05-13T13:18:47.152Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: CodexThemes Products: TheGem Problem Types: CWE-434 Description: The TheGem theme for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the thegem_get_logo_url() function in all versions up to, and including, 5.10.3. This makes it possible for authenticated attackers, with Subscriber-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible. Additional Analyst Notes: - CISA ADP Vulnrichment: Refe
ted site's server which may make remote code execution possible. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/d379bc09-7788-4a29-b23f-7f42afe04fd4?source=cve - https://themeforest.net/item/thegem-creative-multipurpose-highperformance-wordpress-theme/16061685 - https://codex-themes.com/thegem/changelog.html
CVE ID: CVE-2025-4318 State: PUBLISHED Published: 2025-05-05T18:16:34.075Z Last Updated: 2025-10-14T18:15:57.700Z Vendors: Amazon Products: Amplify Studio Problem Types: CWE-95 Description: The AWS Amplify Studio UI component property expressions in the aws-amplify/amplify-codegen-ui package lack input validation. This could potentially allow an authenticated user who has access to create or modify components to run arbitrary JavaScript code during the component rendering and build process. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://aws.amazon.com/security/security-bulletins/AWS-2025-010/ - https://github.com/aws-amplify/amplify-codegen-
es: - https://aws.amazon.com/security/security-bulletins/AWS-2025-010/ - https://github.com/aws-amplify/amplify-codegen-ui/releases/tag/v2.20.3 - https://github.com/aws-amplify/amplify-codegen-ui/security/advisories/GHSA-hf3j-86p7-mfw8
CVE ID: CVE-2025-4321 State: PUBLISHED Published: 2025-11-17T14:58:33.862Z Last Updated: 2025-11-17T15:12:34.390Z Vendors: silabs.com Products: RS9116W Problem Types: CWE-240, CWE-617 Description: In a Bluetooth device, using RS9116-WiseConnect SDK experiences a Denial of Service, if it receives malformed L2CAP packets, only hard reset will bring the device to normal operation Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://community.silabs.com/068Vm00000YV9DL
CVE ID: CVE-2025-4322 State: PUBLISHED Published: 2025-05-20T05:30:48.147Z Last Updated: 2025-05-20T14:04:03.570Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: StylemixThemes Products: Motors - Car Dealer, Rental & Listing WordPress theme Problem Types: CWE-620 Description: The Motors theme for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 5.6.67. This is due to the theme not properly validating a user's identity prior to updating their password. This makes it possible for unauthenticated attackers to change arbitrary user passwords, including those of administrators, and leverage that to gain
uthenticated attackers to change arbitrary user passwords, including those of administrators, and leverage that to gain access to their account. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/61820ca5-5548-4155-b350-df3db1bc1661?source=cve - http://themeforest.net/item/motors-car-dealership-wordpress-theme/13987211
CVE ID: CVE-2025-4323 State: PUBLISHED Published: 2025-05-06T05:00:08.432Z Last Updated: 2025-05-06T13:55:08.633Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N) Vendors: n/a Products: MRCMS Problem Types: CWE-79, CWE-94 Description: A vulnerability, which was classified as problematic, has been found in MRCMS 3.1.2. Affected by this issue is some unknown functionality of the component Edit Article Page. The manipulation of the argument Title leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.307424 - https://vuldb.com/?ctii
Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.307424 - https://vuldb.com/?ctiid.307424 - https://vuldb.com/?submit.563540 - https://github.com/bdkuzma/vuln/issues/3
CVE ID: CVE-2025-4324 State: PUBLISHED Published: 2025-05-06T05:31:04.366Z Last Updated: 2025-05-06T13:52:14.807Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N) Vendors: n/a Products: MRCMS Problem Types: CWE-79, CWE-94 Description: A vulnerability, which was classified as problematic, was found in MRCMS 3.1.2. This affects an unknown part of the file /admin/link/edit.do of the component External Link Management Page. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.307425 - https://vuldb.com/?
sed. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.307425 - https://vuldb.com/?ctiid.307425 - https://vuldb.com/?submit.563543 - https://github.com/bdkuzma/vuln/issues/4
CVE ID: CVE-2025-4325 State: PUBLISHED Published: 2025-05-06T06:00:07.206Z Last Updated: 2025-05-06T13:48:31.756Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N) Vendors: n/a Products: MRCMS Problem Types: CWE-79, CWE-94 Description: A vulnerability has been found in MRCMS 3.1.2 and classified as problematic. This vulnerability affects unknown code of the file /admin/category/add.do of the component Category Management Page. The manipulation of the argument Name leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.307426 - ht
blic and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.307426 - https://vuldb.com/?ctiid.307426 - https://vuldb.com/?submit.563545 - https://github.com/bdkuzma/vuln/issues/6