deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2025-43284
Published: 2025-08-29
Description: An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. An app may be able to cause unexpected system termination.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://support.apple.com/en-us/124149; https://support.apple.com/en-us/124150; https://support.apple.com/en-us/124151
CVE: CVE-2025-54142
Published: 2025-08-29
Description: Akamai Ghost before 2025-07-21 allows HTTP Request Smuggling via an OPTIONS request that has an entity body, because there can be a subsequent request within the persistent connection between an Akamai proxy server and an origin server, if the origin server violates certain Internet standards.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-444
References: https://community.akamai.com/customers/s/feed/0D5a700000W51m8CAB; https://www.akamai.com/blog/security-research/advisory-cve-2025-54142-http-request-smuggling-via-options-body
CVE: CVE-2025-9599
Published: 2025-08-29
Description: A weakness has been identified in itsourcecode Apartment Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /setting/month_setup.php. Executing manipulation of the argument txtMonthName can lead to sql injection. The attack can be launched remotely. The exploit has been made available to the public and could be exploited.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89
References: https://github.com/zzb1388/cve/issues/52; https://itsourcecode.com/; https://vuldb.com/?ctiid.321773
CVE: CVE-2025-9600
Published: 2025-08-29
Description: A security vulnerability has been detected in itsourcecode Apartment Management System 1.0. Affected by this issue is some unknown functionality of the file /setting/member_type_setup.php. The manipulation of the argument txtMemberType leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed publicly and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89
References: https://github.com/zzb1388/cve/issues/51; https://itsourcecode.com/; https://vuldb.com/?ctiid.321774
CVE: CVE-2025-9601
Published: 2025-08-29
Description: A vulnerability was detected in itsourcecode Apartment Management System 1.0. This affects an unknown part of the file /setting/employee_salary_setup.php. The manipulation of the argument ddlEmpName results in sql injection. The attack may be launched remotely. The exploit is now public and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89
References: https://github.com/zzb1388/cve/issues/50; https://itsourcecode.com/; https://vuldb.com/?ctiid.321775
CVE: CVE-2025-9602
Published: 2025-08-29
Description: A vulnerability was found in Xinhu RockOA up to 2.6.9. Impacted is the function publicsaveAjax of the file /index.php. Performing manipulation results in improper authorization. The attack is possible to be carried out remotely. The exploit has been made public and could be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-266, CWE-285, CWE-863
References: https://github.com/rainrocka/xinhu/issues/9; https://github.com/rainrocka/xinhu/issues/9#issue[PII_REDACTED]; https://vuldb.com/?ctiid.321778
CVE: CVE-2025-9603
Published: 2025-08-29
Description: A vulnerability was determined in Telesquare TLR-2005KSH 1.2.4. The affected element is an unknown function of the file /cgi-bin/internet.cgi?Command=lanCfg. Executing manipulation of the argument Hostname can lead to command injection. The attack may be performed from a remote location. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-74, CWE-77, CWE-77
References: https://github.com/lin-3-start/lin-cve/blob/main/Telesquare%20Tlr-2005Ksh/Telesquare%20Tlr-2005Ksh%E5%AD%98%E5%9C%A8%E5%91%BD%E4%BB%A4%E6%B3%A8%E5%85%A5%E6%BC%8F%E6%B4%9E.md; https://github.com/lin-3-start/lin-cve/blob/main/Telesquare%20Tlr-2005Ksh/Telesquare%20Tlr-2005Ksh%E5%AD%98%E5%9C%A8%E5%91%BD%E4%BB%A4%E6%B3%A8%E5%85%A5%E6%BC%8F%E6%B4%9E.md#3poc; https://vuldb.com/?ctiid.321779
CVE: CVE-2025-9604
Published: 2025-08-29
Description: A vulnerability was identified in coze-studio up to 0.2.4. The impacted element is an unknown function of the file backend/domain/plugin/encrypt/aes.go. The manipulation of the argument AuthSecretKey/StateSecretKey/OAuthTokenSecretKey leads to use of hard-coded cryptographic key . It is possible to initiate the attack remotely. The attack is considered to have high complexity. The exploitability is regarded as difficult. To fix this issue, it is recommended to deploy a patch. The vendor replied to the GitHub issue (translated from simplified Chinese): "For scenarios requiring encryption, we will implement user-defined key management through configuration and optimize the use of encryption tools, such as random salt."
CVSS Score: 3.7 (LOW)
CWE: CWE-320, CWE-321
References: https://github.com/coze-dev/coze-studio/issues/505; https://github.com/coze-dev/coze-studio/issues/505#issuecomment[PII_REDACTED]; https://github.com/coze-dev/coze-studio/pull/533
CVE: CVE-2025-39245
Published: 2025-08-29
Description: There is a CSV Injection Vulnerability in some HikCentral Master Lite versions. This could allow an attacker to inject executable commands via malicious CSV data.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-1236
References: https://www.hikvision.com/en/support/cybersecurity/security-advisory/security-vulnerabilities-in-some-hikcentral-products/
CVE: CVE-2025-39246
Published: 2025-08-29
Description: There is an Unquoted Service Path Vulnerability in some HikCentral FocSign versions. This could allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-428
References: https://www.hikvision.com/en/support/cybersecurity/security-advisory/security-vulnerabilities-in-some-hikcentral-products/
CVE: CVE-2025-39247
Published: 2025-08-29
Description: There is an Access Control Vulnerability in some HikCentral Professional versions. This could allow an unauthenticated user to obtain the admin permission.
CVSS Score: 8.6 (HIGH)
CWE: CWE-284
References: https://www.hikvision.com/en/support/cybersecurity/security-advisory/security-vulnerabilities-in-some-hikcentral-products/
CVE: CVE-2025-58323
Published: 2025-08-29
Description: NAVER MYBOX Explorer for Windows before 3.0.8.133 allows a local attacker to escalate privileges to NT AUTHORITY\SYSTEM by executing arbitrary files due to improper privilege checks.
CVSS Score: 7.7 (HIGH)
CWE: CWE-266
References: https://cve.naver.com/detail/cve-2025-58323.html
CVE: CVE-2025-9605
Published: 2025-08-29
Description: A security vulnerability has been detected in Tenda AC21 and AC23 16.03.08.16. Affected is the function GetParentControlInfo of the file /goform/GetParentControlInfo. Such manipulation of the argument mac leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed publicly and may be used.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119, CWE-121
References: https://github.com/XXRicardo/iot-cve/blob/main/Tenda/AC21/AC21V1.0re_V16.03.08.16.md; https://github.com/XXRicardo/iot-cve/blob/main/Tenda/AC23/Stack-Based%20Buffer%20Overflow%20in%20Tenda%20Wi-Fi%205%20Router%20AC23%EF%BC%88AC23V1.0re_V16.03.07.52%EF%BC%89.md; https://vuldb.com/?ctiid.321783
CVE: CVE-2025-9606
Published: 2025-08-29
Description: A vulnerability was detected in Portabilis i-Educar up to 2.10. Affected by this vulnerability is an unknown functionality of the file /intranet/agenda_preferencias.php. Performing manipulation of the argument cod_agenda results in sql injection. The attack may be initiated remotely. The exploit is now public and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-74, CWE-89
References: https://github.com/marcelomulder/CVE/blob/main/i-educar/CVE-2025-9606.md; https://github.com/marcelomulder/CVE/blob/main/i-educar/SQL%20Injection%20(Blind%20Time-Based)%20Vulnerability%20in%20cod_agenda%20Parameter%20on%20agenda_preferencias.php%20Endpoint.md#poc; https://vuldb.com/?ctiid.321784
CVE: CVE-2025-9607
Published: 2025-08-29
Description: A flaw has been found in Portabilis i-Educar up to 2.10. Affected by this issue is some unknown functionality of the file /module/TabelaArredondamento/view of the component Tabelas de Arredondamento Page. Executing manipulation of the argument ID can lead to sql injection. The attack may be launched remotely. The exploit has been published and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-74, CWE-89
References: https://github.com/marcelomulder/CVE/blob/main/i-educar/CVE-2025-9607.md; https://github.com/marcelomulder/CVE/blob/main/i-educar/SQL%20Injection%20(Blind%20Time-Based)%20Vulnerability%20in%20%60id%60%20Parameter%20on%20%60.module.TabelaArredondamento.view%60%20Endpoint.md#poc; https://vuldb.com/?ctiid.321785
CVE: CVE-2025-9608
Published: 2025-08-29
Description: A vulnerability has been found in Portabilis i-Educar up to 2.10. This affects an unknown part of the file /module/FormulaMedia/view of the component Formula de Cálculo de Média Page. The manipulation of the argument ID leads to sql injection. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-74, CWE-89
References: https://github.com/marcelomulder/CVE/blob/main/i-educar/CVE-2025-9608.md; https://github.com/marcelomulder/CVE/blob/main/i-educar/SQL%20Injection%20(Blind%20Time-Based)%20Vulnerability%20in%20%60id%60%20Parameter%20on%20%60.module.FormulaMedia.view%60%20Endpoint%201.md#poc; https://vuldb.com/?ctiid.321786
CVE: CVE-2025-8857
Published: 2025-08-29
Description: Clinic Image System developed by Changing contains hard-coded Credentials, allowing unauthenticated remote attackers to log into the system using administrator credentials embedded in the source code.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-798
References: https://www.chtsecurity.com/news/276d7867-dfb1-4a91-bc34-97b0f6a117a3; https://www.twcert.org.tw/en/cp-139-10363-601c9-2.html; https://www.twcert.org.tw/tw/cp-132-10362-c6021-1.html
CVE: CVE-2025-8858
Published: 2025-08-29
Description: Clinic Image System developed by Changing has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read database contents.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: https://www.twcert.org.tw/en/cp-139-10363-601c9-2.html; https://www.twcert.org.tw/tw/cp-132-10362-c6021-1.html
CVE: CVE-2025-8861
Published: 2025-08-29
Description: TSA developed by Changing has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to read, modify, and delete database contents.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-306
References: https://www.twcert.org.tw/en/cp-139-10361-4ce04-2.html; https://www.twcert.org.tw/tw/cp-132-10360-012e7-1.html
CVE: CVE-2025-9609
Published: 2025-08-29
Description: A vulnerability was found in Portabilis i-Educar up to 2.10. This vulnerability affects unknown code of the file /educacenso/consulta. The manipulation results in improper authorization. The attack can be executed remotely. The exploit has been made public and could be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-266, CWE-285
References: https://github.com/marcelomulder/CVE/blob/main/i-educar/Broken%20Access%20Control%20%E2%80%93%20Missing%20Function-Level%20Access%20Control%20in%20%60.educacenso.consulta%60%20Endpoint.md#poc; https://github.com/marcelomulder/CVE/blob/main/i-educar/CVE-2025-9609.md; https://vuldb.com/?ctiid.321787
CVE: CVE-2025-9610
Published: 2025-08-29
Description: A vulnerability was determined in code-projects Online Event Judging System 1.0. This issue affects some unknown processing of the file /create_account.php. This manipulation of the argument fname causes sql injection. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized. Other parameters might be affected as well.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89, CWE-89
References: https://code-projects.org/; https://github.com/yihaofuweng/cve/issues/15; https://vuldb.com/?ctiid.321788
CVE: CVE-2025-9619
Published: 2025-08-29
Description: A security flaw has been discovered in E4 Sistemas Mercatus ERP 2.00.019. The affected element is an unknown function of the file /basico/webservice/imprimir-danfe/id/. Performing manipulation results in improper control of resource identifiers. It is possible to initiate the attack remotely. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-99
References: https://vuldb.com/?ctiid.321790; https://vuldb.com/?id.321790; https://vuldb.com/?submit.636623
CVE: CVE-2025-9639
Published: 2025-08-29
Description: The QbiCRMGateway developed by Ai3 has an Arbitrary File Reading vulnerability, allowing unauthenticated remote attackers to exploit Relative Path Traversal to download arbitrary system files.
CVSS Score: 7.5 (HIGH)
CWE: CWE-23
References: https://www.twcert.org.tw/en/cp-139-10365-bf667-2.html; https://www.twcert.org.tw/tw/cp-132-10364-6ac24-1.html
CVE: CVE-2025-53507
Published: 2025-08-29
Description: Multiple products provided by iND Co.,Ltd contain an insecure storage of sensitive information vulnerability. If exploited, configuration information, such as admin password, may be disclosed. As for the details of affected product names and versions, refer to the information under [Product Status].
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-922
References: https://jvn.jp/en/jp/JVN50585992/; https://www.i-netd.co.jp/vulnerability/dceid-2025-001/
CVE: CVE-2025-53508
Published: 2025-08-29
Description: Multiple products provided by iND Co.,Ltd contain an OS command injection vulnerability. If exploited, an arbitrary OS command may be executed and sensitive information may be obtained. As for the details of affected product names and versions, refer to the information under [Product Status].
CVSS Score: 7.2 (HIGH)
CWE: CWE-78
References: https://jvn.jp/en/jp/JVN50585992/; https://www.i-netd.co.jp/vulnerability/dceid-2025-001/
CVE: CVE-2025-8147
Published: 2025-08-29
Description: The LWSCache plugin for WordPress is vulnerable to unauthorized modification of data due to improper authorization on the lwscache_activatePlugin() function in all versions up to, and including, 2.8.5. This makes it possible for authenticated attackers, with Subscriber-level access and above, to activate arbitrary whitelisted LWS plugins.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-285
References: https://plugins.trac.wordpress.org/browser/lwscache/tags/2.8.5/lwscache.php#L401; https://plugins.trac.wordpress.org/changeset/3352047/; https://wordpress.org/plugins/lwscache/#developers
CVE: CVE-2025-8290
Published: 2025-08-29
Description: The List Subpages plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘title’ parameter in all versions up to, and including, 1.0.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3361841%40list-sub-pages&new=3361841%40list-sub-pages&sfp_email=&sfph_mail=#file5; https://wordpress.org/plugins/list-sub-pages/#developers; https://www.wordfence.com/threat-intel/vulnerabilities/id/b5a24a4a-654c-487e-af68-13db63961896?source=cve
CVE: CVE-2025-8619
Published: 2025-08-29
Description: The OSM Map Widget for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Map Block URL in all versions up to, and including, 1.3.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/osm-map-elementor/tags/1.3.0/osm-map.php#L1753; https://plugins.trac.wordpress.org/browser/osm-map-elementor/tags/1.3.1/osm-map.php#L1518; https://www.wordfence.com/threat-intel/vulnerabilities/id/22fa3f61-51c8-47b0-a4af-149491c32573?source=cve
CVE: CVE-2025-9374
Published: 2025-08-29
Description: The Ultimate Tag Warrior Importer plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.2. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to import tags granted they can trick a site administrator into performing an action such as clicking on a link.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://wordpress.org/plugins/utw-importer/; https://www.wordfence.com/threat-intel/vulnerabilities/id/218d0d28-16db-4d9c-b643-6cc2edfc74e2?source=cve
CVE: CVE-2025-9441
Published: 2025-08-29
Description: The iATS Online Forms plugin for WordPress is vulnerable to time-based SQL Injection via the ‘order' parameter in all versions up to, and including, 1.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for authenticated attackers, with Contributor-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-89
References: https://plugins.trac.wordpress.org/browser/iats-online-forms/trunk/class-iats-form-table.php#L241; https://wordpress.org/plugins/iats-online-forms/#developers; https://www.wordfence.com/threat-intel/vulnerabilities/id/ea183ae3-683f-4eec-b583-feefc8c62382?source=cve
CVE: CVE-2025-54777
Published: 2025-08-29
Description: Uncaught exception issue exists in Multiple products in bizhub series. If a malformed file is imported as an S/MIME Email certificate, it may cause a denial-of-service issue that disable the Web Connection feature.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-248
References: https://jvn.jp/en/vu/JVNVU99831542/; https://www.konicaminolta.jp/business/support/important/250829_01_01.html
CVE: CVE-2024-13987
Published: 2025-08-29
Description: Improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in Synology RADIUS Server allows remote authenticated users with administrator privileges to read or write limited files in SRM and conduct limited denial-of-service via unspecified vectors.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-79
References: https://www.synology.com/en-global/security/advisory/Synology_SA_25_10
CVE: CVE-2025-8150
Published: 2025-08-29
Description: The Events Addon for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Typewriter and Countdown widgets in all versions up to, and including, 2.2.9 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/changeset/3351935/; https://wordpress.org/plugins/events-addon-for-elementor/#developers; https://www.wordfence.com/threat-intel/vulnerabilities/id/c3122921-6bea-49e7-b1d7-77a291928497?source=cve
CVE: CVE-2025-4643
Published: 2025-08-29
Description: Payload uses JSON Web Tokens (JWT) for authentication. After log out JWT is not invalidated, which allows an attacker who has stolen or intercepted token to freely reuse it until expiration date (which is by default set to 2 hours, but can be changed). 

This issue has been fixed in version 3.44.0 of Payload.
CWE: CWE-613
References: https://cert.pl/en/posts/2025/08/CVE-2025-4643; https://github.com/payloadcms/payload; https://payloadcms.com
CVE: CVE-2025-4644
Published: 2025-08-29
Description: A Session Fixation vulnerability existed in Payload's SQLite adapter due to identifier reuse during account creation. A malicious attacker could create a new account, save its JSON Web Token (JWT), and then delete the account, which did not invalidate the JWT. As a result, the next newly created user would receive the same identifier, allowing the attacker to reuse the JWT to authenticate and perform actions as that user.

This issue has been fixed in version 3.44.0 of Payload.
CWE: CWE-384
References: https://cert.pl/en/posts/2025/08/CVE-2025-4643; https://github.com/payloadcms/payload; https://payloadcms.com
CVE: CVE-2025-7071
Published: 2025-08-29
Description: Padding oracle attack vulnerability in Oberon microsystem AG’s ocrypto library in all versions since 3.1.0 and prior to 3.9.2 allows an attacker to recover plaintexts via timing measurements of AES-CBC PKCS#7 decrypt operations.
CWE: CWE-208, CWE-327
References: https://www.oberon.ch/security-advisories/cve-2025-7071/
CVE: CVE-2025-7383
Published: 2025-08-29
Description: Padding oracle attack vulnerability in Oberon microsystem AG’s Oberon PSA Crypto library in all versions since 1.0.0 and prior to 1.5.1 allows an attacker to recover plaintexts via timing measurements of AES-CBC PKCS#7 decrypt operations.
CWE: CWE-208, CWE-327
References: https://www.oberon.ch/security-advisories/cve-2025-7383/
CVE: CVE-2025-9071
Published: 2025-08-29
Description: Erroneously using an all-zero seed for RSA-OEAP padding instead of the generated random bytes, in Oberon microsystems AG’s Oberon PSA Crypto library in all versions up to 1.5.1, results in deterministic RSA and thus in a loss of confidentiality for guessable messages, recognition of repeated messages, and loss of security proofs.
CWE: CWE-780
References: https://www.oberon.ch/security-advisories/cve-2025-9071/
CVE: CVE-2024-13342
Published: 2025-08-29
Description: The Booster for WooCommerce plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'add_files_to_order' function in all versions up to, and including, 7.2.4. This makes it possible for unauthenticated attackers to upload arbitrary files with double extensions on the affected site's server which may make remote code execution possible. This is only exploitable on select instances where the configuration will execute the first extension present.
CVSS Score: 8.1 (HIGH)
CWE: CWE-434
References: https://plugins.trac.wordpress.org/browser/woocommerce-jetpack/tags/7.2.4/includes/class-wcj-checkout-files-upload.php#L452; https://plugins.trac.wordpress.org/changeset/3262569/; https://www.wordfence.com/threat-intel/vulnerabilities/id/5ac8a125-121c-4392-846e[PII_REDACTED]72?source=cve
CVE: CVE-2025-9217
Published: 2025-08-29
Description: The Slider Revolution plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 6.7.36 via the 'used_svg' and 'used_images' parameters. This makes it possible for authenticated attackers, with Contributor-level access and above, to read the contents of arbitrary files on the server, which can contain sensitive information.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: https://www.sliderrevolution.com/documentation/changelog/#6-7-37; https://www.wordfence.com/threat-intel/vulnerabilities/id/ea49df40-e58f-4e20-8e48-ed0f9a1b94ca?source=cve
CVE: CVE-2025-40702
Published: 2025-08-29
Description: Cross-Site Scripting (XSS) vulnerability in OpenAtlas v8.9.0 from the Austrian Centre for Digital Humanities and Cultural Heritage (ACDH-CH), due to inadequate validation of user input when a POST request is sent. The vulnerabilities could allow a remote user to send specially crafted queries to an authenticated user and steal their session cookie details, via  the "/insert/file" petition, "creator" and "license_holder" parameters.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/craws/OpenAtlas; https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-cross-site-scripting-xss-vulnerabilities-openatlas-acdh-ch