Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-51671 State: PUBLISHED Published: 2025-06-26T00:00:00.000Z Last Updated: 2025-06-26T19:56:03.068Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL injection vulnerability was discovered in the PHPGurukul Dairy Farm Shop Management System 1.3. The vulnerability allows remote attackers to execute arbitrary SQL code via the category and categorycode parameters in a POST request to the manage-categories.php file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/rtnthakur/CVE/blob/main/PHPGurukul/Dairy-Farm-Shop-Management-System/SQL/SQL_injection_edit-category.md
CVE ID: CVE-2025-51672 State: PUBLISHED Published: 2025-06-26T00:00:00.000Z Last Updated: 2025-06-26T15:41:47.983Z Vendors: n/a Products: n/a Problem Types: n/a Description: A time-based blind SQL injection vulnerability was identified in the PHPGurukul Dairy Farm Shop Management System 1.3. The vulnerability exists in the manage-companies.php file and allows remote attackers to execute arbitrary SQL code via the companyname parameter in a POST request. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/rtnthakur/CVE/blob/main/PHPGurukul/Dairy-Farm-Shop-Management-System/SQL/SQL_injection_edit-company.md
CVE ID: CVE-2025-51691 State: PUBLISHED Published: 2025-08-13T00:00:00.000Z Last Updated: 2025-08-13T20:12:13.492Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-Site Scripting (XSS) vulnerability found in MarkTwo commit e3a1d3f90cce4ea9c26efcbbf3a1cbfb9dcdb298 (May 2025) allows a remote attacker to execute arbitrary code via a crafted script input to the editor interface. The application does not properly sanitize user-supplied Markdown before rendering it. Successful exploitation could lead to session hijacking, credential theft, or arbitrary client-side code execution in the context of the victim's browser. Additional Analyst Notes: - CISA ADP Vulnrichment: References: -
code execution in the context of the victim's browser. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://marktwo.app/try-it-now - https://github.com/anthonygarvan/marktwo - https://github.com/0x72303074/CVE-Disclosures/tree/main/MarkTwo%20Markdown%20Editor/CVE-2025-51691
CVE ID: CVE-2025-51726 State: PUBLISHED Published: 2025-08-04T00:00:00.000Z Last Updated: 2025-08-05T13:42:40.240Z Vendors: n/a Products: n/a Problem Types: n/a Description: CyberGhostVPNSetup.exe (Windows installer) is signed using the weak cryptographic hash algorithm SHA-1, which is vulnerable to collision attacks. This allows a malicious actor to craft a fake installer with a forged SHA-1 certificate that may still be accepted by Windows signature verification mechanisms, particularly on systems without strict SmartScreen or trust policy enforcement. Additionally, the installer lacks High Entropy Address Space Layout Randomization (ASLR), as confirmed by BinSkim (BA2015 rule) and repeate
nstaller lacks High Entropy Address Space Layout Randomization (ASLR), as confirmed by BinSkim (BA2015 rule) and repeated WinDbg analysis. The binary consistently loads into predictable memory ranges, increasing the success rate of memory corruption exploits. These two misconfigurations, when combined, significantly lower the bar for successful supply-chain style attacks or privilege escalation through fake installers. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/meisterlos/CVE - https://github.com/meisterlos/CVE-2025-51726
CVE ID: CVE-2025-51818 State: PUBLISHED Published: 2025-08-21T00:00:00.000Z Last Updated: 2025-08-22T15:55:00.414Z Vendors: n/a Products: n/a Problem Types: n/a Description: MCCMS 2.7.0 is vulnerable to Arbitrary file deletion in the Backups.php component. This allows an attacker to execute arbitrary commands Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Y4y17/CVE/blob/main/Arbitrary%20file%20deletion%20vulnerability.md
CVE ID: CVE-2025-51823 State: PUBLISHED Published: 2025-08-11T00:00:00.000Z Last Updated: 2025-08-11T19:27:14.575Z Vendors: n/a Products: n/a Problem Types: n/a Description: libcsp 2.0 is vulnerable to Buffer Overflow in the csp_eth_init() function due to improper handling of the ifname parameter. The function uses strcpy to copy the interface name into a structure member (ctx->name) without validating the input length. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/libcsp/libcsp/issues/850 - https://github.com/libcsp/libcsp/pull/852
CVE ID: CVE-2025-51824 State: PUBLISHED Published: 2025-08-11T00:00:00.000Z Last Updated: 2025-08-11T19:24:48.275Z Vendors: n/a Products: n/a Problem Types: n/a Description: libcsp 2.0 is vulnerable to Buffer Overflow in the csp_usart_open() function at drivers/usart/zephyr.c. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/libcsp/libcsp/issues/851 - https://github.com/libcsp/libcsp/pull/853
CVE ID: CVE-2025-51825 State: PUBLISHED Published: 2025-08-22T00:00:00.000Z Last Updated: 2025-08-22T17:45:02.680Z Vendors: n/a Products: n/a Problem Types: n/a Description: JeecgBoot versions from 3.4.3 up to 3.8.0 were found to contain a SQL injection vulnerability in the /jeecg-boot/online/cgreport/head/parseSql endpoint, which allows bypassing SQL blacklist restrictions. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/jeecgboot/JeecgBoot/issues/8335 - https://r4gd0ll.github.io/2025/JEECGBOOT_BYPASS_SQLInject.html
CVE ID: CVE-2025-51857 State: PUBLISHED Published: 2025-08-05T00:00:00.000Z Last Updated: 2025-08-05T18:59:21.184Z Vendors: n/a Products: n/a Problem Types: n/a Description: The reconcile method in the AttachmentReconciler class of the Halo system v.2.20.18LTS and before is vulnerable to XSS attacks. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://halo.com - https://github.com/halo-dev/halo - https://gist.github.com/this1slwl/d714514635119159607c14faebbbcf20
CVE ID: CVE-2025-51858 State: PUBLISHED Published: 2025-07-22T00:00:00.000Z Last Updated: 2025-07-22T16:10:19.592Z Vendors: n/a Products: n/a Problem Types: n/a Description: Self Cross-Site Scripting (XSS) vulnerability in ChatPlayground.ai through 2025-05-24, allows attackers to execute arbitrary code and gain sensitive information via a crafted SVG file contents sent through the chat component. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Secsys-FDU/CVE-2025-51858
CVE ID: CVE-2025-51859 State: PUBLISHED Published: 2025-07-22T00:00:00.000Z Last Updated: 2025-07-22T15:26:08.741Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stored Cross-Site Scripting (XSS) vulnerability in Chaindesk thru 2025-05-26 in its agent chat component. An attacker can achieve arbitrary client-side script execution by crafting an AI agent whose system prompt instructs the underlying Large Language Model (LLM) to embed malicious script payloads (e.g., SVG-based XSS) into its chat responses. When a user interacts with such a malicious agent or accesses a direct link to a conversation containing an XSS payload, the script executes in the user's browser. Successful expl
es a direct link to a conversation containing an XSS payload, the script executes in the user's browser. Successful exploitation can lead to the theft of sensitive information, such as JWT session tokens, potentially resulting in account hijacking. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Secsys-FDU/CVE-2025-51859
CVE ID: CVE-2025-51860 State: PUBLISHED Published: 2025-07-22T00:00:00.000Z Last Updated: 2025-07-22T16:07:47.174Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stored Cross-Site Scripting (XSS) in TelegAI (telegai.com) 2025-05-26 in its chat component and character container component. An attacker can achieve arbitrary client-side script execution by crafting an AI Character with SVG XSS payloads in either description, greeting, example dialog, or system prompt(instructing the LLM to embed XSS payload in its chat response). When a user interacts with such a malicious AI Character or just browse its profile, the script executes in the user's browser. Successful exploitation can
licious AI Character or just browse its profile, the script executes in the user's browser. Successful exploitation can lead to the theft of sensitive information, such as session tokens, potentially resulting in account hijacking. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Secsys-FDU/CVE-2025-51860
CVE ID: CVE-2025-51862 State: PUBLISHED Published: 2025-07-22T00:00:00.000Z Last Updated: 2025-07-22T16:08:58.908Z Vendors: n/a Products: n/a Problem Types: n/a Description: Insecure Direct Object Reference (IDOR) vulnerability in TelegAI (telegai.com) thru 2025-05-26 in its chat component. An attacker can exploit this IDOR to tamper other users' conversation. Additionally, malicious contents and XSS payloads can be injected, leading to phishing attack, user spoofing and account hijacking via XSS. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Secsys-FDU/CVE-2025-51862
CVE ID: CVE-2025-51863 State: PUBLISHED Published: 2025-07-22T00:00:00.000Z Last Updated: 2025-07-22T16:09:38.369Z Vendors: n/a Products: n/a Problem Types: n/a Description: Self Cross Site Scripting (XSS) vulnerability in ChatGPT Unli (ChatGPTUnli.com) thru 2025-05-26 allows attackers to execute arbitrary code via a crafted SVG file to the chat interface. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Secsys-FDU/CVE-2025-51863
CVE ID: CVE-2025-51864 State: PUBLISHED Published: 2025-07-22T00:00:00.000Z Last Updated: 2025-07-22T15:32:49.707Z Vendors: n/a Products: n/a Problem Types: n/a Description: A reflected cross-site scripting (XSS) vulnerability exists in AIBOX LLM chat (chat.aibox365.cn) through 2025-05-27, allowing attackers to hijack accounts through stolen JWT tokens. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Secsys-FDU/CVE-2025-51864
CVE ID: CVE-2025-51865 State: PUBLISHED Published: 2025-07-22T00:00:00.000Z Last Updated: 2025-07-22T15:40:12.213Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ai2 playground web service (playground.allenai.org) LLM chat through 2025-06-03 is vulnerable to Insecure Direct Object Reference (IDOR), allowing attackers to gain sensitvie information via enumerating thread keys in the URL. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Secsys-FDU/CVE-2025-51865
CVE ID: CVE-2025-51867 State: PUBLISHED Published: 2025-07-22T00:00:00.000Z Last Updated: 2025-07-23T14:35:57.475Z Vendors: n/a Products: n/a Problem Types: n/a Description: Insecure Direct Object Reference (IDOR) vulnerability in Deepfiction AI (deepfiction.ai) thru June 3, 2025, allowing attackers to chat with the LLM using other users' credits via sensitive information gained by the /browse/stories endpoint. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Secsys-FDU/CVE-2025-51867
CVE ID: CVE-2025-51868 State: PUBLISHED Published: 2025-07-21T00:00:00.000Z Last Updated: 2025-07-22T13:53:54.886Z Vendors: n/a Products: n/a Problem Types: n/a Description: Insecure Direct Object Reference (IDOR) vulnerability in Dippy (chat.dippy.ai) v2 allows attackers to gain sensitive information via the conversation_id parameter to the conversation_history endpoint. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Secsys-FDU/CVE-2025-51868
CVE ID: CVE-2025-51869 State: PUBLISHED Published: 2025-07-21T00:00:00.000Z Last Updated: 2025-07-22T13:33:04.838Z Vendors: n/a Products: n/a Problem Types: n/a Description: Insecure Direct Object Reference (IDOR) vulnerability in Liner thru 2025-06-03 allows attackers to gain sensitive information via crafted space_id, thread_id, and message_id parameters to the v1/space/{space_id}/thread/{thread_id}/message/{message_id} endpoint. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Secsys-FDU/CVE-2025-51869
CVE ID: CVE-2025-51951 State: PUBLISHED Published: 2025-07-30T00:00:00.000Z Last Updated: 2025-07-30T19:25:58.849Z Vendors: n/a Products: n/a Problem Types: n/a Description: andisearch v0.5.249 was discovered to contain a cross-site scripting (XSS) vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://andisearch.com/ - https://github.com/Secsys-FDU/LLMCVE/blob/main/CVE-2025-51951/CVE_detail.md
CVE ID: CVE-2025-51954 State: PUBLISHED Published: 2025-07-30T00:00:00.000Z Last Updated: 2025-07-30T19:32:37.065Z Vendors: n/a Products: n/a Problem Types: n/a Description: playground.electronhub.ai v1.1.9 was discovered to contain a cross-site scripting (XSS) vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://secsys.fudan.edu.cn/ - https://playground.electronhub.ai/ - https://github.com/Secsys-FDU/LLMCVE/blob/main/CVE-2025-51954/CVE_detail.md
CVE ID: CVE-2025-51965 State: PUBLISHED Published: 2025-08-14T00:00:00.000Z Last Updated: 2025-08-15T16:41:19.288Z Vendors: n/a Products: n/a Problem Types: n/a Description: OURPHP thru 8.6.1 is vulnerable to Cross-Site Scripting (XSS) via the "Name" field of the "Complete Profile" functionality under the "My User Center" page, which can be accessed after registering through the front-end interface. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://ourphp.com - https://www.ourphp.net/ - https://www.yuque.com/hkone-3iknd/sgwwfb/nvi4f00wqh3kyg0z?singleDoc
CVE ID: CVE-2025-51966 State: PUBLISHED Published: 2025-09-02T00:00:00.000Z Last Updated: 2025-09-02T19:44:07.875Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability exists in the PDF preview functionality of uTools thru 7.1.1. When a user previews a specially crafted PDF file, embedded JavaScript code executes within the application's privileged context, potentially allowing attackers to steal sensitive data or perform unauthorized actions. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://t1sts.github.io/2025/05/27/uTools-has-an-XSS-vulnerability/ - https://t1sts.github.io/2025/09/01/CVE-2025-51966/
CVE ID: CVE-2025-51967 State: PUBLISHED Published: 2025-08-28T00:00:00.000Z Last Updated: 2025-08-28T20:11:01.022Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Reflected Cross-site Scripting (XSS) vulnerability exists in the themeSet.php file of ProjectsAndPrograms School Management System 1.0. The application fails to sanitize user-supplied input in the theme POST parameter, allowing an attacker to inject and execute arbitrary JavaScript in a victim's browser. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/jairajparyani/CVE-s/blob/main/CVE-2025-51967%20%E2%80%93%20Reflected%20XSS%20in%20School%20Management%20System
CVE ID: CVE-2025-51968 State: PUBLISHED Published: 2025-08-28T00:00:00.000Z Last Updated: 2025-08-28T20:00:02.626Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL Injection vulnerability exists in the action.php file of PuneethReddyHC Online Shopping System Advanced 1.0. The application fails to properly sanitize user-supplied input in the proId POST parameter, allowing attackers to inject arbitrary SQL expressions. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/jairajparyani/CVE-s/blob/main/CVE-2025-51968%20%E2%80%93%20SQL%20Injection%20in%20Online%20Shopping%20System%20Advanced
CVE ID: CVE-2025-51969 State: PUBLISHED Published: 2025-08-28T00:00:00.000Z Last Updated: 2025-08-28T20:01:01.148Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL Injection vulnerability exists in the product.php page of PuneethReddyHC Online Shopping System Advanced 1.0. This flaw is present in the product_id GET parameter, which is not properly validated before being included in a SQL statement. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/jairajparyani/CVE-s/blob/main/CVE-2025-51969%20%E2%80%93%20SQL%20Injection%20in%20Online%20Shopping%20System%20Advanced
CVE ID: CVE-2025-51970 State: PUBLISHED Published: 2025-07-29T00:00:00.000Z Last Updated: 2025-08-28T13:45:03.363Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL Injection vulnerability exists in the action.php endpoint of PuneethReddyHC Online Shopping System Advanced 1.0 due to improper sanitization of user-supplied input in the keyword POST parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gist.github.com/im4x/10738ee219d69024387737fb14cdba9f - https://github.com/jairajparyani/CVE-s/blob/main/CVE-2025-51970%20%E2%80%93%20SQL%20Injection%20Vulnerability%20in%20Online%20Shopping%20System%20Advanced
CVE ID: CVE-2025-51971 State: PUBLISHED Published: 2025-08-28T00:00:00.000Z Last Updated: 2025-08-28T14:26:39.615Z Vendors: n/a Products: n/a Problem Types: n/a Description: A reflected Cross-Site Scripting (XSS) vulnerability exists in register.php of PuneethReddyHC Online Shopping System Advanced 1.0. Unsanitized user input in the f_name parameter is reflected in the server response without proper HTML encoding or output escaping. This allows remote attackers to inject arbitrary JavaScript code. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/jairajparyani/CVE-s/blob/main/CVE-2025-51971%20%E2%80%93%20Reflected%20Cross-Site%20Scripting%20%28XSS%29%20in%20
ub.com/jairajparyani/CVE-s/blob/main/CVE-2025-51971%20%E2%80%93%20Reflected%20Cross-Site%20Scripting%20%28XSS%29%20in%20Online%20Shopping%20System
CVE ID: CVE-2025-51972 State: PUBLISHED Published: 2025-08-28T00:00:00.000Z Last Updated: 2025-08-28T14:24:11.155Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL Injection vulnerability exists in the login.php of PuneethReddyHC Online Shopping System Advanced 1.0 due to improper sanitization of user-supplied input in the keyword POST parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/jairajparyani/CVE-s/blob/main/CVE-2025-51972%20%E2%80%93%20SQL%20Injection%20in%20Online%20Shopping%20System
CVE ID: CVE-2025-51986 State: PUBLISHED Published: 2025-08-14T00:00:00.000Z Last Updated: 2025-08-14T19:45:32.285Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the demo/LINUXTCP implementation of cwalter-at freemodbus v.2018-09-12 allowing attackers to reach an infinite loop via a crafted length value for a packet. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gist.github.com/jyjsunny/a9743a718ed3081b034c11201803f6b4
CVE ID: CVE-2025-51989 State: PUBLISHED Published: 2025-08-21T00:00:00.000Z Last Updated: 2025-08-22T13:42:50.545Z Vendors: n/a Products: n/a Problem Types: n/a Description: HTML injection vulnerability in the registration interface in Evolution Consulting Kft. HRmaster module v235 allows an attacker to inject HTML tags into the "keresztnév" (firstname) field, which will be sent out in an email resulting in possible Phishing scenarios against any, previously not registered, email address. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://evolution.com - http://hrmaster.com - https://hrmaster.hu/modulok/toborzas-es-kivalasztas - https://www.evolution-consulting.hu/ - htt
- http://hrmaster.com - https://hrmaster.hu/modulok/toborzas-es-kivalasztas - https://www.evolution-consulting.hu/ - https://github.com/Apor/Vulnerabilities/tree/main/CVE-2025-51989
CVE ID: CVE-2025-51990 State: PUBLISHED Published: 2025-08-20T00:00:00.000Z Last Updated: 2025-08-20T15:53:53.689Z Vendors: n/a Products: n/a Problem Types: n/a Description: XWiki through version 17.3.0 is affected by multiple stored Cross-Site Scripting (XSS) vulnerabilities in the Administration interface, specifically under the Presentation section of the Global Preferences panel. An authenticated administrator can inject arbitrary JavaScript payloads into the HTTP Meta Info, Footer Copyright, and Footer Version fields. These inputs are stored and subsequently rendered without proper output encoding or sanitization on public-facing pages. As a result, the injected scripts are persistently
ithout proper output encoding or sanitization on public-facing pages. As a result, the injected scripts are persistently executed in the browser context of any visitor to the affected instances including both authenticated and unauthenticated users. No user interaction is required beyond visiting a page that includes the malicious content. Successful exploitation can lead to session hijacking, credential theft, unauthorized actions via session riding, or further compromise of the application through client-side attacks. The vulnerability introduces significant risk in any deployment, especially in shared or internet-facing environments where administrator credentials may be compromised. Addi
eployment, especially in shared or internet-facing environments where administrator credentials may be compromised. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/malcxlmj/cve-writeups/blob/main/CVE-2025-51990.md
CVE ID: CVE-2025-51991 State: PUBLISHED Published: 2025-08-20T00:00:00.000Z Last Updated: 2025-08-20T15:43:26.008Z Vendors: n/a Products: n/a Problem Types: n/a Description: XWiki through version 17.3.0 is vulnerable to Server-Side Template Injection (SSTI) in the Administration interface, specifically within the HTTP Meta Info field of the Global Preferences Presentation section. An authenticated administrator can inject crafted Apache Velocity template code, which is rendered on the server side without proper validation or sandboxing. This enables the execution of arbitrary template logic, which may expose internal server information or, in specific configurations, lead to further exploita
ry template logic, which may expose internal server information or, in specific configurations, lead to further exploitation such as remote code execution or sensitive data leakage. The vulnerability resides in improper handling of dynamic template rendering within user-supplied configuration fields. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://xwiki.org - https://github.com/malcxlmj/cve-writeups/blob/main/CVE-2025-51991.md
CVE ID: CVE-2025-52021 State: PUBLISHED Published: 2025-10-07T00:00:00.000Z Last Updated: 2025-10-08T13:34:07.727Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL Injection vulnerability exists in the edit_product.php file of PuneethReddyHC Online Shopping System Advanced 1.0. The product_id GET parameter is unsafely passed to a SQL query without proper validation or parameterization. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gist.github.com/hafizgemilang/c953d16c1459458667132e93359f3d6c
CVE ID: CVE-2025-52035 State: PUBLISHED Published: 2025-08-26T00:00:00.000Z Last Updated: 2025-08-26T15:27:13.375Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability in NotesCMS and specifically in the page /index.php?route=notes. The manipulation of the title of the service descriptions leads to a stored XSS vulnerability. The issue was confirmed to be present in the source code as of commit 7d821a0f028b0778b245b99ab3d3bff1ac10e2d3 (dated 2024-05-08) and was fixed in commit 95322c5121dbd7070f3bd54f2848079654a0a8ea (dated 2025-03-31). The attack can be launched remotely. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/PrivateAccount
be launched remotely. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/PrivateAccount/NotesCMS/issues/2 - https://gist.github.com/yA0-Z/54322492b29d7711859913891a7ef988